./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 34885b99d6eef31987b044fabc3622fa239d5dff7e774ca124915f70431dc2b3 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 07:39:02,698 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 07:39:02,700 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 07:39:02,732 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 07:39:02,734 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 07:39:02,739 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 07:39:02,741 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 07:39:02,745 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 07:39:02,751 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 07:39:02,752 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 07:39:02,754 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 07:39:02,756 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 07:39:02,758 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 07:39:02,762 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 07:39:02,764 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 07:39:02,767 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 07:39:02,769 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 07:39:02,775 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 07:39:02,777 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 07:39:02,781 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 07:39:02,786 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 07:39:02,792 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 07:39:02,793 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 07:39:02,794 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 07:39:02,798 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 07:39:02,798 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 07:39:02,798 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 07:39:02,799 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 07:39:02,800 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 07:39:02,801 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 07:39:02,801 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 07:39:02,802 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 07:39:02,803 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 07:39:02,804 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 07:39:02,805 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 07:39:02,805 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 07:39:02,806 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 07:39:02,806 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 07:39:02,811 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 07:39:02,813 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 07:39:02,814 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 07:39:02,815 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-19 07:39:02,876 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 07:39:02,876 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 07:39:02,876 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 07:39:02,876 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 07:39:02,877 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 07:39:02,877 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 07:39:02,877 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 07:39:02,878 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 07:39:02,878 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 07:39:02,878 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 07:39:02,878 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 07:39:02,878 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 07:39:02,879 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 07:39:02,879 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 07:39:02,879 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 07:39:02,879 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 07:39:02,880 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 07:39:02,880 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 07:39:02,881 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-19 07:39:02,881 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-19 07:39:02,881 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 07:39:02,881 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-19 07:39:02,882 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-19 07:39:02,882 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 07:39:02,882 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-19 07:39:02,882 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 07:39:02,883 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-19 07:39:02,883 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-19 07:39:02,883 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-19 07:39:02,883 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 07:39:02,884 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-19 07:39:02,884 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-19 07:39:02,884 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 07:39:02,885 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 07:39:02,885 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 07:39:02,885 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 07:39:02,885 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 07:39:02,886 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 07:39:02,886 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 07:39:02,886 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 07:39:02,886 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 07:39:02,887 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 07:39:02,894 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 34885b99d6eef31987b044fabc3622fa239d5dff7e774ca124915f70431dc2b3 [2022-11-19 07:39:03,172 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 07:39:03,196 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 07:39:03,199 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 07:39:03,201 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 07:39:03,202 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 07:39:03,203 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i [2022-11-19 07:39:03,273 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/data/076dcd9c2/030fd0314def4eccb74bee6c7ce8241a/FLAG3ed9986d9 [2022-11-19 07:39:03,831 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 07:39:03,832 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i [2022-11-19 07:39:03,844 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/data/076dcd9c2/030fd0314def4eccb74bee6c7ce8241a/FLAG3ed9986d9 [2022-11-19 07:39:04,119 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/data/076dcd9c2/030fd0314def4eccb74bee6c7ce8241a [2022-11-19 07:39:04,122 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 07:39:04,124 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 07:39:04,125 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 07:39:04,125 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 07:39:04,133 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 07:39:04,134 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,137 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@f17b906 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04, skipping insertion in model container [2022-11-19 07:39:04,137 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,146 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 07:39:04,185 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 07:39:04,625 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 07:39:04,635 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 07:39:04,675 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 07:39:04,699 INFO L208 MainTranslator]: Completed translation [2022-11-19 07:39:04,699 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04 WrapperNode [2022-11-19 07:39:04,699 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 07:39:04,700 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 07:39:04,700 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 07:39:04,701 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 07:39:04,714 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,746 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,782 INFO L138 Inliner]: procedures = 117, calls = 17, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 103 [2022-11-19 07:39:04,783 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 07:39:04,784 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 07:39:04,784 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 07:39:04,784 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 07:39:04,793 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,793 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,796 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,797 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,808 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,812 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,814 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,823 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,830 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 07:39:04,831 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 07:39:04,831 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 07:39:04,831 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 07:39:04,837 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (1/1) ... [2022-11-19 07:39:04,844 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 07:39:04,858 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:04,879 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 07:39:04,887 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 07:39:04,928 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-19 07:39:04,928 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-19 07:39:04,928 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-19 07:39:04,929 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-19 07:39:04,929 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 07:39:04,929 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 07:39:05,045 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 07:39:05,047 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 07:39:05,329 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 07:39:05,474 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 07:39:05,475 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-19 07:39:05,481 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:39:05 BoogieIcfgContainer [2022-11-19 07:39:05,482 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 07:39:05,484 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 07:39:05,484 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 07:39:05,502 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 07:39:05,503 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 07:39:04" (1/3) ... [2022-11-19 07:39:05,503 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@71301c42 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:39:05, skipping insertion in model container [2022-11-19 07:39:05,504 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:39:04" (2/3) ... [2022-11-19 07:39:05,504 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@71301c42 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:39:05, skipping insertion in model container [2022-11-19 07:39:05,504 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:39:05" (3/3) ... [2022-11-19 07:39:05,506 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrncat-alloca-2.i [2022-11-19 07:39:05,531 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 07:39:05,531 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 17 error locations. [2022-11-19 07:39:05,621 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 07:39:05,631 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@9ed1248, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 07:39:05,631 INFO L358 AbstractCegarLoop]: Starting to check reachability of 17 error locations. [2022-11-19 07:39:05,638 INFO L276 IsEmpty]: Start isEmpty. Operand has 37 states, 19 states have (on average 2.3684210526315788) internal successors, (45), 36 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:05,647 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-19 07:39:05,647 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:05,648 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-19 07:39:05,650 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:05,658 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:05,659 INFO L85 PathProgramCache]: Analyzing trace with hash 163242, now seen corresponding path program 1 times [2022-11-19 07:39:05,670 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:05,671 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1015170762] [2022-11-19 07:39:05,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:05,672 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:05,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:05,972 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:05,973 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:05,973 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1015170762] [2022-11-19 07:39:05,974 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1015170762] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:05,975 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:39:05,975 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-19 07:39:05,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1072550758] [2022-11-19 07:39:05,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:05,983 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:39:05,985 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:06,030 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:39:06,032 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:39:06,035 INFO L87 Difference]: Start difference. First operand has 37 states, 19 states have (on average 2.3684210526315788) internal successors, (45), 36 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:06,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:06,149 INFO L93 Difference]: Finished difference Result 38 states and 44 transitions. [2022-11-19 07:39:06,151 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:39:06,152 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-19 07:39:06,153 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:06,162 INFO L225 Difference]: With dead ends: 38 [2022-11-19 07:39:06,162 INFO L226 Difference]: Without dead ends: 36 [2022-11-19 07:39:06,164 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:39:06,168 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 1 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:06,169 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 51 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:39:06,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-19 07:39:06,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-19 07:39:06,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:06,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-19 07:39:06,207 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 3 [2022-11-19 07:39:06,208 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:06,208 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-19 07:39:06,208 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:06,209 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-19 07:39:06,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-19 07:39:06,209 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:06,209 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-19 07:39:06,210 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 07:39:06,210 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:06,211 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:06,211 INFO L85 PathProgramCache]: Analyzing trace with hash 5059762, now seen corresponding path program 1 times [2022-11-19 07:39:06,212 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:06,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1580092131] [2022-11-19 07:39:06,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:06,213 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:06,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:06,528 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:06,528 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:06,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1580092131] [2022-11-19 07:39:06,529 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1580092131] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:06,529 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:39:06,529 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 07:39:06,529 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1932980425] [2022-11-19 07:39:06,530 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:06,531 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:39:06,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:06,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:39:06,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:39:06,533 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:06,605 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:06,605 INFO L93 Difference]: Finished difference Result 34 states and 39 transitions. [2022-11-19 07:39:06,606 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:39:06,606 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-19 07:39:06,606 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:06,610 INFO L225 Difference]: With dead ends: 34 [2022-11-19 07:39:06,610 INFO L226 Difference]: Without dead ends: 34 [2022-11-19 07:39:06,615 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:39:06,617 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 34 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:06,617 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 18 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:39:06,618 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-11-19 07:39:06,621 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2022-11-19 07:39:06,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 33 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:06,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 39 transitions. [2022-11-19 07:39:06,623 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 39 transitions. Word has length 4 [2022-11-19 07:39:06,623 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:06,623 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 39 transitions. [2022-11-19 07:39:06,623 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:06,624 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 39 transitions. [2022-11-19 07:39:06,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-19 07:39:06,624 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:06,624 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-19 07:39:06,625 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 07:39:06,625 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:06,626 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:06,626 INFO L85 PathProgramCache]: Analyzing trace with hash 5059763, now seen corresponding path program 1 times [2022-11-19 07:39:06,626 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:06,626 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [786823803] [2022-11-19 07:39:06,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:06,639 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:06,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:07,077 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:07,078 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:07,078 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [786823803] [2022-11-19 07:39:07,079 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [786823803] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:07,079 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:39:07,079 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 07:39:07,080 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [752525300] [2022-11-19 07:39:07,081 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:07,081 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 07:39:07,082 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:07,083 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 07:39:07,083 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-19 07:39:07,083 INFO L87 Difference]: Start difference. First operand 34 states and 39 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:07,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:07,261 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2022-11-19 07:39:07,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:39:07,262 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-19 07:39:07,262 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:07,263 INFO L225 Difference]: With dead ends: 65 [2022-11-19 07:39:07,263 INFO L226 Difference]: Without dead ends: 65 [2022-11-19 07:39:07,264 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-19 07:39:07,265 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 109 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:07,266 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [109 Valid, 49 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:39:07,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-19 07:39:07,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 36. [2022-11-19 07:39:07,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 21 states have (on average 2.0) internal successors, (42), 35 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:07,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 42 transitions. [2022-11-19 07:39:07,281 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 42 transitions. Word has length 4 [2022-11-19 07:39:07,281 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:07,282 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 42 transitions. [2022-11-19 07:39:07,282 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:07,282 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 42 transitions. [2022-11-19 07:39:07,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-19 07:39:07,283 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:07,284 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-19 07:39:07,284 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-19 07:39:07,284 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:07,287 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:07,288 INFO L85 PathProgramCache]: Analyzing trace with hash 156955998, now seen corresponding path program 1 times [2022-11-19 07:39:07,288 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:07,289 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1006607192] [2022-11-19 07:39:07,289 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:07,289 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:07,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:07,454 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:07,454 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:07,454 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1006607192] [2022-11-19 07:39:07,454 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1006607192] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:07,455 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:39:07,455 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 07:39:07,455 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2092778757] [2022-11-19 07:39:07,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:07,455 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 07:39:07,456 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:07,456 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 07:39:07,456 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 07:39:07,457 INFO L87 Difference]: Start difference. First operand 36 states and 42 transitions. Second operand has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:07,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:07,558 INFO L93 Difference]: Finished difference Result 62 states and 71 transitions. [2022-11-19 07:39:07,558 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:39:07,559 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-19 07:39:07,559 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:07,560 INFO L225 Difference]: With dead ends: 62 [2022-11-19 07:39:07,560 INFO L226 Difference]: Without dead ends: 62 [2022-11-19 07:39:07,560 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-19 07:39:07,572 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 130 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:07,572 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 74 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:39:07,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-19 07:39:07,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 37. [2022-11-19 07:39:07,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 22 states have (on average 1.9545454545454546) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:07,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-19 07:39:07,580 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 5 [2022-11-19 07:39:07,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:07,580 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-19 07:39:07,581 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:07,582 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-19 07:39:07,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-19 07:39:07,582 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:07,583 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-19 07:39:07,583 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 07:39:07,583 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:07,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:07,585 INFO L85 PathProgramCache]: Analyzing trace with hash 156958550, now seen corresponding path program 1 times [2022-11-19 07:39:07,585 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:07,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [873467037] [2022-11-19 07:39:07,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:07,586 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:07,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:07,828 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:07,829 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:07,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [873467037] [2022-11-19 07:39:07,829 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [873467037] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:07,829 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:39:07,829 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 07:39:07,829 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1592891927] [2022-11-19 07:39:07,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:07,832 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 07:39:07,832 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:07,833 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 07:39:07,834 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-19 07:39:07,834 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:07,902 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:07,902 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-11-19 07:39:07,903 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:39:07,903 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-19 07:39:07,903 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:07,906 INFO L225 Difference]: With dead ends: 37 [2022-11-19 07:39:07,906 INFO L226 Difference]: Without dead ends: 36 [2022-11-19 07:39:07,908 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-19 07:39:07,911 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 43 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:07,914 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 73 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:39:07,915 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-19 07:39:07,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-19 07:39:07,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:07,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-19 07:39:07,918 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 5 [2022-11-19 07:39:07,918 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:07,918 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-19 07:39:07,921 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:07,925 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-19 07:39:07,926 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-19 07:39:07,926 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:07,926 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-19 07:39:07,926 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-19 07:39:07,926 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:07,927 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:07,927 INFO L85 PathProgramCache]: Analyzing trace with hash 567552496, now seen corresponding path program 1 times [2022-11-19 07:39:07,927 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:07,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [747688485] [2022-11-19 07:39:07,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:07,928 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:07,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:08,194 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:08,195 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:08,195 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [747688485] [2022-11-19 07:39:08,195 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [747688485] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:08,195 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [984794891] [2022-11-19 07:39:08,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:08,196 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:08,196 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:08,203 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:08,219 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-19 07:39:08,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:08,289 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-19 07:39:08,295 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:08,454 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:08,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-19 07:39:08,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:39:08,643 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:08,643 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:39:08,860 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:39:08,872 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:08,873 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [984794891] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:39:08,873 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [699046189] [2022-11-19 07:39:08,903 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-19 07:39:08,903 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:39:08,908 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:39:08,915 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:39:08,915 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:39:09,039 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:09,043 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:09,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:39:09,143 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:39:09,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:09,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:09,407 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:39:09,923 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '525#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_#t~nondet14#1| 127) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet14#1|)) (= |#NULL.base| 0))' at error location [2022-11-19 07:39:09,923 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:39:09,923 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:39:09,923 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 11 [2022-11-19 07:39:09,923 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1908763846] [2022-11-19 07:39:09,924 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:39:09,924 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-19 07:39:09,924 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:09,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-19 07:39:09,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2022-11-19 07:39:09,925 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:10,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:10,300 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2022-11-19 07:39:10,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-19 07:39:10,301 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-19 07:39:10,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:10,302 INFO L225 Difference]: With dead ends: 65 [2022-11-19 07:39:10,302 INFO L226 Difference]: Without dead ends: 65 [2022-11-19 07:39:10,302 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 4 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-11-19 07:39:10,303 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 142 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:10,303 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 112 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 07:39:10,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-19 07:39:10,306 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 34. [2022-11-19 07:39:10,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 20 states have (on average 1.95) internal successors, (39), 33 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:10,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 39 transitions. [2022-11-19 07:39:10,311 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 39 transitions. Word has length 6 [2022-11-19 07:39:10,311 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:10,311 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 39 transitions. [2022-11-19 07:39:10,312 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:10,312 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 39 transitions. [2022-11-19 07:39:10,312 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-19 07:39:10,312 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:10,312 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:10,326 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:10,520 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-11-19 07:39:10,520 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:10,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:10,521 INFO L85 PathProgramCache]: Analyzing trace with hash 414361537, now seen corresponding path program 1 times [2022-11-19 07:39:10,521 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:10,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [749952052] [2022-11-19 07:39:10,521 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:10,521 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:10,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:10,562 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:39:10,563 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:10,563 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [749952052] [2022-11-19 07:39:10,563 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [749952052] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:10,563 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:39:10,563 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 07:39:10,564 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1121251528] [2022-11-19 07:39:10,564 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:10,564 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:39:10,564 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:10,565 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:39:10,565 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:39:10,565 INFO L87 Difference]: Start difference. First operand 34 states and 39 transitions. Second operand has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:10,603 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:10,603 INFO L93 Difference]: Finished difference Result 32 states and 37 transitions. [2022-11-19 07:39:10,603 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:39:10,604 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-19 07:39:10,604 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:10,604 INFO L225 Difference]: With dead ends: 32 [2022-11-19 07:39:10,604 INFO L226 Difference]: Without dead ends: 32 [2022-11-19 07:39:10,605 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:39:10,606 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 28 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:10,606 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 17 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:39:10,608 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-11-19 07:39:10,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 32. [2022-11-19 07:39:10,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 20 states have (on average 1.85) internal successors, (37), 31 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:10,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 37 transitions. [2022-11-19 07:39:10,617 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 37 transitions. Word has length 7 [2022-11-19 07:39:10,620 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:10,620 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 37 transitions. [2022-11-19 07:39:10,620 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:10,620 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 37 transitions. [2022-11-19 07:39:10,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-19 07:39:10,621 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:10,622 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:10,623 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-19 07:39:10,623 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:10,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:10,625 INFO L85 PathProgramCache]: Analyzing trace with hash 414361538, now seen corresponding path program 1 times [2022-11-19 07:39:10,625 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:10,625 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1177645521] [2022-11-19 07:39:10,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:10,626 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:10,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:10,767 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:10,768 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:10,768 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1177645521] [2022-11-19 07:39:10,768 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1177645521] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:10,768 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1068580977] [2022-11-19 07:39:10,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:10,770 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:10,770 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:10,771 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:10,777 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-19 07:39:10,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:10,853 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-19 07:39:10,854 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:10,920 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:10,920 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:39:10,984 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:10,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1068580977] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:39:10,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [166269328] [2022-11-19 07:39:10,987 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-19 07:39:10,987 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:39:10,987 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:39:10,988 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:39:10,988 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:39:11,043 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:11,047 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:11,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:39:11,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:11,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:11,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:11,296 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:39:12,149 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '751#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (not (< (+ |ULTIMATE.start_main_~i~0#1| 1) |ULTIMATE.start_main_~length1~0#1|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (< (+ |ULTIMATE.start_main_~i~1#1| 1) |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-19 07:39:12,150 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:39:12,150 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:39:12,150 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 11 [2022-11-19 07:39:12,150 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [883212963] [2022-11-19 07:39:12,150 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:39:12,151 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-19 07:39:12,151 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:12,151 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-19 07:39:12,151 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=240, Unknown=0, NotChecked=0, Total=306 [2022-11-19 07:39:12,151 INFO L87 Difference]: Start difference. First operand 32 states and 37 transitions. Second operand has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:12,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:12,309 INFO L93 Difference]: Finished difference Result 60 states and 69 transitions. [2022-11-19 07:39:12,309 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-19 07:39:12,310 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-19 07:39:12,310 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:12,310 INFO L225 Difference]: With dead ends: 60 [2022-11-19 07:39:12,310 INFO L226 Difference]: Without dead ends: 60 [2022-11-19 07:39:12,311 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 7 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 109 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=105, Invalid=401, Unknown=0, NotChecked=0, Total=506 [2022-11-19 07:39:12,311 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 210 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 210 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 84 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:12,312 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [210 Valid, 132 Invalid, 84 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:39:12,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2022-11-19 07:39:12,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 35. [2022-11-19 07:39:12,315 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 23 states have (on average 1.7826086956521738) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:12,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-11-19 07:39:12,315 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 7 [2022-11-19 07:39:12,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:12,316 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-11-19 07:39:12,316 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:12,316 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-11-19 07:39:12,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-19 07:39:12,316 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:12,316 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:12,328 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:12,517 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-11-19 07:39:12,517 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:12,518 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:12,518 INFO L85 PathProgramCache]: Analyzing trace with hash 414364089, now seen corresponding path program 1 times [2022-11-19 07:39:12,518 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:12,518 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1361224954] [2022-11-19 07:39:12,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:12,518 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:12,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:12,688 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:12,689 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:12,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1361224954] [2022-11-19 07:39:12,689 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1361224954] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:12,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [924037217] [2022-11-19 07:39:12,689 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:12,690 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:12,690 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:12,691 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:12,719 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-19 07:39:12,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:12,775 INFO L263 TraceCheckSpWp]: Trace formula consists of 73 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-19 07:39:12,776 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:12,890 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:12,890 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:39:12,890 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [924037217] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:12,890 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:39:12,891 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 7 [2022-11-19 07:39:12,891 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1077878095] [2022-11-19 07:39:12,891 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:12,892 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 07:39:12,892 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:12,893 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 07:39:12,893 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-19 07:39:12,894 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:12,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:12,974 INFO L93 Difference]: Finished difference Result 34 states and 40 transitions. [2022-11-19 07:39:12,974 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:39:12,975 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-19 07:39:12,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:12,975 INFO L225 Difference]: With dead ends: 34 [2022-11-19 07:39:12,975 INFO L226 Difference]: Without dead ends: 34 [2022-11-19 07:39:12,975 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2022-11-19 07:39:12,976 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 96 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:12,976 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 13 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:39:12,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-11-19 07:39:12,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2022-11-19 07:39:12,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 23 states have (on average 1.7391304347826086) internal successors, (40), 33 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:12,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 40 transitions. [2022-11-19 07:39:12,979 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 40 transitions. Word has length 7 [2022-11-19 07:39:12,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:12,979 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 40 transitions. [2022-11-19 07:39:12,979 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:12,979 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 40 transitions. [2022-11-19 07:39:12,980 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-19 07:39:12,980 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:12,980 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:12,991 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:13,180 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:13,181 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:13,181 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:13,181 INFO L85 PathProgramCache]: Analyzing trace with hash -39615125, now seen corresponding path program 1 times [2022-11-19 07:39:13,181 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:13,181 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1649437861] [2022-11-19 07:39:13,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:13,182 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:13,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:13,537 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:13,537 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:13,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1649437861] [2022-11-19 07:39:13,537 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1649437861] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:13,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2061443055] [2022-11-19 07:39:13,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:13,538 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:13,538 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:13,543 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:13,563 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-19 07:39:13,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:13,619 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 12 conjunts are in the unsatisfiable core [2022-11-19 07:39:13,621 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:13,660 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-19 07:39:13,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-19 07:39:13,758 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:39:13,758 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:39:13,758 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2061443055] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:13,758 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:39:13,759 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 8 [2022-11-19 07:39:13,759 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1310117577] [2022-11-19 07:39:13,759 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:13,759 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 07:39:13,760 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:13,760 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 07:39:13,760 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-19 07:39:13,760 INFO L87 Difference]: Start difference. First operand 34 states and 40 transitions. Second operand has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:13,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:13,864 INFO L93 Difference]: Finished difference Result 59 states and 69 transitions. [2022-11-19 07:39:13,864 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 07:39:13,864 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-19 07:39:13,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:13,865 INFO L225 Difference]: With dead ends: 59 [2022-11-19 07:39:13,865 INFO L226 Difference]: Without dead ends: 59 [2022-11-19 07:39:13,865 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=68, Unknown=0, NotChecked=0, Total=110 [2022-11-19 07:39:13,866 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 115 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:13,866 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 42 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:39:13,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-19 07:39:13,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 37. [2022-11-19 07:39:13,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 26 states have (on average 1.6923076923076923) internal successors, (44), 36 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:13,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 44 transitions. [2022-11-19 07:39:13,869 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 44 transitions. Word has length 8 [2022-11-19 07:39:13,870 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:13,870 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 44 transitions. [2022-11-19 07:39:13,870 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:13,870 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 44 transitions. [2022-11-19 07:39:13,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-19 07:39:13,870 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:13,870 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1] [2022-11-19 07:39:13,876 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:14,076 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-19 07:39:14,077 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:14,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:14,077 INFO L85 PathProgramCache]: Analyzing trace with hash -1327018651, now seen corresponding path program 2 times [2022-11-19 07:39:14,077 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:14,077 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [161747606] [2022-11-19 07:39:14,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:14,078 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:14,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:14,368 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:14,369 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:14,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [161747606] [2022-11-19 07:39:14,369 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [161747606] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:14,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [594457295] [2022-11-19 07:39:14,369 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:39:14,369 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:14,369 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:14,371 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:14,391 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-19 07:39:14,443 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2022-11-19 07:39:14,443 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:39:14,444 INFO L263 TraceCheckSpWp]: Trace formula consists of 62 conjuncts, 14 conjunts are in the unsatisfiable core [2022-11-19 07:39:14,447 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:14,507 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-19 07:39:14,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-19 07:39:14,646 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:39:14,646 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:39:14,646 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [594457295] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:14,646 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:39:14,646 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 9 [2022-11-19 07:39:14,647 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [880322910] [2022-11-19 07:39:14,647 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:14,647 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 07:39:14,647 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:14,648 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 07:39:14,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2022-11-19 07:39:14,648 INFO L87 Difference]: Start difference. First operand 37 states and 44 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:14,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:14,754 INFO L93 Difference]: Finished difference Result 57 states and 67 transitions. [2022-11-19 07:39:14,755 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 07:39:14,755 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-19 07:39:14,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:14,755 INFO L225 Difference]: With dead ends: 57 [2022-11-19 07:39:14,755 INFO L226 Difference]: Without dead ends: 57 [2022-11-19 07:39:14,756 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=38, Invalid=94, Unknown=0, NotChecked=0, Total=132 [2022-11-19 07:39:14,756 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 88 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:14,757 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 42 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:39:14,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-19 07:39:14,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 35. [2022-11-19 07:39:14,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 25 states have (on average 1.68) internal successors, (42), 34 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:14,759 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 42 transitions. [2022-11-19 07:39:14,759 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 42 transitions. Word has length 9 [2022-11-19 07:39:14,760 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:14,760 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 42 transitions. [2022-11-19 07:39:14,760 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:14,760 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 42 transitions. [2022-11-19 07:39:14,760 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-19 07:39:14,761 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:14,761 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:14,776 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:14,971 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-19 07:39:14,971 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:14,972 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:14,972 INFO L85 PathProgramCache]: Analyzing trace with hash 584631406, now seen corresponding path program 1 times [2022-11-19 07:39:14,972 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:14,972 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [199619660] [2022-11-19 07:39:14,972 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:14,972 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:14,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:15,053 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:15,053 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:15,053 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [199619660] [2022-11-19 07:39:15,053 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [199619660] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:15,054 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:39:15,054 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 07:39:15,054 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1451740623] [2022-11-19 07:39:15,054 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:15,055 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 07:39:15,056 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:15,056 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 07:39:15,056 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 07:39:15,056 INFO L87 Difference]: Start difference. First operand 35 states and 42 transitions. Second operand has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:15,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:15,125 INFO L93 Difference]: Finished difference Result 33 states and 40 transitions. [2022-11-19 07:39:15,126 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:39:15,126 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-19 07:39:15,127 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:15,127 INFO L225 Difference]: With dead ends: 33 [2022-11-19 07:39:15,127 INFO L226 Difference]: Without dead ends: 33 [2022-11-19 07:39:15,128 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-19 07:39:15,128 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 55 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:15,129 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 19 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:39:15,130 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-11-19 07:39:15,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 32. [2022-11-19 07:39:15,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 25 states have (on average 1.56) internal successors, (39), 31 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:15,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 39 transitions. [2022-11-19 07:39:15,134 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 39 transitions. Word has length 10 [2022-11-19 07:39:15,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:15,135 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 39 transitions. [2022-11-19 07:39:15,135 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:15,135 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 39 transitions. [2022-11-19 07:39:15,137 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-19 07:39:15,137 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:15,137 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:15,137 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-19 07:39:15,138 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:15,138 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:15,138 INFO L85 PathProgramCache]: Analyzing trace with hash 584631407, now seen corresponding path program 1 times [2022-11-19 07:39:15,138 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:15,139 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1345341616] [2022-11-19 07:39:15,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:15,139 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:15,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:15,345 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:15,345 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:15,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1345341616] [2022-11-19 07:39:15,345 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1345341616] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:15,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [551831588] [2022-11-19 07:39:15,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:15,346 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:15,346 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:15,347 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:15,366 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-19 07:39:15,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:15,440 INFO L263 TraceCheckSpWp]: Trace formula consists of 118 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-19 07:39:15,441 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:15,653 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:15,653 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:39:15,724 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-19 07:39:15,897 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:15,897 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [551831588] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:39:15,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [410101065] [2022-11-19 07:39:15,900 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-19 07:39:15,900 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:39:15,900 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:39:15,901 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:39:15,901 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:39:15,958 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:15,964 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:15,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:39:16,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:39:16,080 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:16,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:16,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:39:16,271 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-19 07:39:16,272 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-19 07:39:16,331 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:39:18,197 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [410101065] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:18,197 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:39:18,197 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [5, 8, 8] total 25 [2022-11-19 07:39:18,198 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1322075067] [2022-11-19 07:39:18,198 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:18,199 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-19 07:39:18,199 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:18,199 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-19 07:39:18,200 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-11-19 07:39:18,200 INFO L87 Difference]: Start difference. First operand 32 states and 39 transitions. Second operand has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:18,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:18,422 INFO L93 Difference]: Finished difference Result 58 states and 69 transitions. [2022-11-19 07:39:18,422 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-19 07:39:18,422 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-19 07:39:18,423 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:18,423 INFO L225 Difference]: With dead ends: 58 [2022-11-19 07:39:18,423 INFO L226 Difference]: Without dead ends: 58 [2022-11-19 07:39:18,424 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 8 SyntacticMatches, 1 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 127 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-11-19 07:39:18,424 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 113 mSDsluCounter, 41 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:18,425 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [113 Valid, 49 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 07:39:18,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-11-19 07:39:18,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 36. [2022-11-19 07:39:18,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 29 states have (on average 1.4827586206896552) internal successors, (43), 35 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:18,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 43 transitions. [2022-11-19 07:39:18,429 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 43 transitions. Word has length 10 [2022-11-19 07:39:18,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:18,429 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 43 transitions. [2022-11-19 07:39:18,429 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:18,429 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 43 transitions. [2022-11-19 07:39:18,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-19 07:39:18,430 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:18,430 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1] [2022-11-19 07:39:18,442 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:18,636 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-19 07:39:18,637 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:18,637 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:18,637 INFO L85 PathProgramCache]: Analyzing trace with hash 340436050, now seen corresponding path program 1 times [2022-11-19 07:39:18,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:18,637 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1665416221] [2022-11-19 07:39:18,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:18,637 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:18,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:18,817 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 1 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:18,817 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:18,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1665416221] [2022-11-19 07:39:18,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1665416221] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:18,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [539139504] [2022-11-19 07:39:18,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:18,818 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:18,819 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:18,820 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:18,836 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-19 07:39:18,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:18,920 INFO L263 TraceCheckSpWp]: Trace formula consists of 101 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-19 07:39:18,922 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:19,026 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:19,026 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:39:19,129 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:19,130 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [539139504] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:39:19,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1951385445] [2022-11-19 07:39:19,135 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-19 07:39:19,135 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:39:19,136 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:39:19,136 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:39:19,136 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:39:19,189 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:19,192 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:19,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:39:19,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:39:19,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:19,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:19,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:19,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:19,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:19,581 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:39:20,350 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1544#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:39:20,350 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:39:20,351 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:39:20,351 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 16 [2022-11-19 07:39:20,351 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [145957705] [2022-11-19 07:39:20,351 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:39:20,351 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-19 07:39:20,351 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:20,352 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-19 07:39:20,352 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=405, Unknown=0, NotChecked=0, Total=506 [2022-11-19 07:39:20,352 INFO L87 Difference]: Start difference. First operand 36 states and 43 transitions. Second operand has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:20,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:20,673 INFO L93 Difference]: Finished difference Result 101 states and 117 transitions. [2022-11-19 07:39:20,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-19 07:39:20,674 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-19 07:39:20,674 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:20,675 INFO L225 Difference]: With dead ends: 101 [2022-11-19 07:39:20,675 INFO L226 Difference]: Without dead ends: 101 [2022-11-19 07:39:20,676 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 15 SyntacticMatches, 2 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=207, Invalid=785, Unknown=0, NotChecked=0, Total=992 [2022-11-19 07:39:20,676 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 353 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 353 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 166 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:20,681 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [353 Valid, 291 Invalid, 166 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:39:20,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2022-11-19 07:39:20,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 41. [2022-11-19 07:39:20,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 40 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:20,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 50 transitions. [2022-11-19 07:39:20,690 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 50 transitions. Word has length 11 [2022-11-19 07:39:20,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:20,690 INFO L495 AbstractCegarLoop]: Abstraction has 41 states and 50 transitions. [2022-11-19 07:39:20,690 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:20,691 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 50 transitions. [2022-11-19 07:39:20,691 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-19 07:39:20,692 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:20,692 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:20,715 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:20,899 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-19 07:39:20,899 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:20,900 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:20,900 INFO L85 PathProgramCache]: Analyzing trace with hash -809932952, now seen corresponding path program 1 times [2022-11-19 07:39:20,900 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:20,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [524783888] [2022-11-19 07:39:20,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:20,900 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:20,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:21,387 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:21,387 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:21,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [524783888] [2022-11-19 07:39:21,387 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [524783888] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:21,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1836077208] [2022-11-19 07:39:21,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:21,387 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:21,388 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:21,393 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:21,423 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-19 07:39:21,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:21,498 INFO L263 TraceCheckSpWp]: Trace formula consists of 129 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-19 07:39:21,502 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:21,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:39:21,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:39:21,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-19 07:39:22,039 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:39:22,041 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:39:22,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 10 [2022-11-19 07:39:22,068 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:22,068 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:39:22,232 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:39:22,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 25 [2022-11-19 07:39:22,242 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:39:22,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 36 treesize of output 32 [2022-11-19 07:39:22,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-19 07:39:22,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:39:22,526 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:22,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1836077208] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:39:22,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [641278391] [2022-11-19 07:39:22,528 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-19 07:39:22,528 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:39:22,528 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:39:22,529 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:39:22,529 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:39:22,599 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:22,603 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:22,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:39:22,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:39:22,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:22,764 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:22,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:39:22,939 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-19 07:39:22,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-19 07:39:23,204 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:39:26,008 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1802#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-19 07:39:26,008 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:39:26,008 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:39:26,008 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 10, 10] total 26 [2022-11-19 07:39:26,009 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [204602504] [2022-11-19 07:39:26,009 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:39:26,009 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-19 07:39:26,009 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:26,010 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-19 07:39:26,010 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=1068, Unknown=0, NotChecked=0, Total=1190 [2022-11-19 07:39:26,011 INFO L87 Difference]: Start difference. First operand 41 states and 50 transitions. Second operand has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:27,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:27,046 INFO L93 Difference]: Finished difference Result 74 states and 85 transitions. [2022-11-19 07:39:27,046 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-19 07:39:27,046 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-19 07:39:27,047 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:27,047 INFO L225 Difference]: With dead ends: 74 [2022-11-19 07:39:27,047 INFO L226 Difference]: Without dead ends: 74 [2022-11-19 07:39:27,050 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 486 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=232, Invalid=2024, Unknown=0, NotChecked=0, Total=2256 [2022-11-19 07:39:27,052 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 80 mSDsluCounter, 237 mSDsCounter, 0 mSdLazyCounter, 417 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 253 SdHoareTripleChecker+Invalid, 505 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 417 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 69 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:27,053 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 253 Invalid, 505 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 417 Invalid, 0 Unknown, 69 Unchecked, 0.4s Time] [2022-11-19 07:39:27,053 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2022-11-19 07:39:27,065 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 59. [2022-11-19 07:39:27,069 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 52 states have (on average 1.4807692307692308) internal successors, (77), 58 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:27,070 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 77 transitions. [2022-11-19 07:39:27,073 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 77 transitions. Word has length 12 [2022-11-19 07:39:27,073 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:27,073 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 77 transitions. [2022-11-19 07:39:27,073 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:27,074 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 77 transitions. [2022-11-19 07:39:27,074 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-19 07:39:27,075 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:27,075 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 1, 1, 1, 1, 1] [2022-11-19 07:39:27,087 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:27,283 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-11-19 07:39:27,283 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:27,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:27,284 INFO L85 PathProgramCache]: Analyzing trace with hash -1868709771, now seen corresponding path program 2 times [2022-11-19 07:39:27,284 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:27,284 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [662615331] [2022-11-19 07:39:27,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:27,284 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:27,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:27,547 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:39:27,548 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:27,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [662615331] [2022-11-19 07:39:27,548 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [662615331] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:27,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [563513458] [2022-11-19 07:39:27,548 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:39:27,548 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:27,548 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:27,550 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:27,559 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-19 07:39:27,648 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-19 07:39:27,648 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:39:27,649 INFO L263 TraceCheckSpWp]: Trace formula consists of 88 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-19 07:39:27,654 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:27,713 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-19 07:39:27,714 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-19 07:39:27,968 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:39:27,968 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:39:28,243 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:39:28,243 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [563513458] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:39:28,244 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [67956] [2022-11-19 07:39:28,245 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-19 07:39:28,246 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:39:28,246 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:39:28,246 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:39:28,246 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:39:28,299 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:28,302 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:28,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:39:28,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:28,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:28,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:28,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:39:28,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:28,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:28,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:28,689 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:39:29,485 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2059#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:39:29,485 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:39:29,486 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:39:29,486 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-11-19 07:39:29,486 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [758580244] [2022-11-19 07:39:29,486 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:39:29,486 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-19 07:39:29,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:29,487 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-19 07:39:29,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=107, Invalid=399, Unknown=0, NotChecked=0, Total=506 [2022-11-19 07:39:29,487 INFO L87 Difference]: Start difference. First operand 59 states and 77 transitions. Second operand has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:29,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:29,921 INFO L93 Difference]: Finished difference Result 122 states and 164 transitions. [2022-11-19 07:39:29,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-19 07:39:29,923 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-19 07:39:29,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:29,924 INFO L225 Difference]: With dead ends: 122 [2022-11-19 07:39:29,924 INFO L226 Difference]: Without dead ends: 122 [2022-11-19 07:39:29,925 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 165 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=194, Invalid=618, Unknown=0, NotChecked=0, Total=812 [2022-11-19 07:39:29,925 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 321 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 171 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 171 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:29,926 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [321 Valid, 97 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 171 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 07:39:29,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122 states. [2022-11-19 07:39:29,931 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122 to 57. [2022-11-19 07:39:29,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 51 states have (on average 1.4705882352941178) internal successors, (75), 56 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:29,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 75 transitions. [2022-11-19 07:39:29,932 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 75 transitions. Word has length 13 [2022-11-19 07:39:29,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:29,932 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 75 transitions. [2022-11-19 07:39:29,933 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:29,933 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 75 transitions. [2022-11-19 07:39:29,935 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-19 07:39:29,935 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:29,935 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:29,941 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:30,141 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-11-19 07:39:30,141 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:30,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:30,141 INFO L85 PathProgramCache]: Analyzing trace with hash 661880773, now seen corresponding path program 1 times [2022-11-19 07:39:30,142 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:30,142 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [189544400] [2022-11-19 07:39:30,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:30,142 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:30,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:30,208 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:39:30,208 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:30,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [189544400] [2022-11-19 07:39:30,209 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [189544400] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:30,209 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:39:30,209 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 07:39:30,209 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1233535930] [2022-11-19 07:39:30,209 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:30,210 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 07:39:30,210 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:30,210 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 07:39:30,210 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 07:39:30,211 INFO L87 Difference]: Start difference. First operand 57 states and 75 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:30,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:30,272 INFO L93 Difference]: Finished difference Result 57 states and 73 transitions. [2022-11-19 07:39:30,272 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:39:30,272 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-19 07:39:30,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:30,273 INFO L225 Difference]: With dead ends: 57 [2022-11-19 07:39:30,273 INFO L226 Difference]: Without dead ends: 57 [2022-11-19 07:39:30,273 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-19 07:39:30,274 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 33 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:30,275 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 28 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:39:30,275 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-19 07:39:30,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 56. [2022-11-19 07:39:30,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 51 states have (on average 1.411764705882353) internal successors, (72), 55 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:30,277 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2022-11-19 07:39:30,278 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 13 [2022-11-19 07:39:30,278 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:30,278 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2022-11-19 07:39:30,278 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:30,278 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2022-11-19 07:39:30,279 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-19 07:39:30,279 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:30,279 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:30,279 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-11-19 07:39:30,280 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:30,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:30,280 INFO L85 PathProgramCache]: Analyzing trace with hash 661880774, now seen corresponding path program 1 times [2022-11-19 07:39:30,280 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:30,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [414825161] [2022-11-19 07:39:30,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:30,281 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:30,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:30,502 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:39:30,502 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:30,503 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [414825161] [2022-11-19 07:39:30,503 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [414825161] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:30,503 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:39:30,503 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 07:39:30,503 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [754896908] [2022-11-19 07:39:30,503 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:30,504 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 07:39:30,504 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:30,504 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 07:39:30,505 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-19 07:39:30,505 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:30,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:30,624 INFO L93 Difference]: Finished difference Result 65 states and 82 transitions. [2022-11-19 07:39:30,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 07:39:30,625 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-19 07:39:30,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:30,627 INFO L225 Difference]: With dead ends: 65 [2022-11-19 07:39:30,627 INFO L226 Difference]: Without dead ends: 65 [2022-11-19 07:39:30,627 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=47, Unknown=0, NotChecked=0, Total=72 [2022-11-19 07:39:30,628 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 58 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 23 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:30,628 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 23 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:39:30,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-19 07:39:30,632 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 60. [2022-11-19 07:39:30,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 55 states have (on average 1.3636363636363635) internal successors, (75), 59 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:30,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 75 transitions. [2022-11-19 07:39:30,634 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 75 transitions. Word has length 13 [2022-11-19 07:39:30,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:30,635 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 75 transitions. [2022-11-19 07:39:30,635 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:30,635 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 75 transitions. [2022-11-19 07:39:30,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-19 07:39:30,636 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:30,636 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:30,636 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-11-19 07:39:30,636 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:30,637 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:30,637 INFO L85 PathProgramCache]: Analyzing trace with hash 2003282293, now seen corresponding path program 1 times [2022-11-19 07:39:30,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:30,637 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807854645] [2022-11-19 07:39:30,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:30,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:30,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:30,944 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:30,944 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:30,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807854645] [2022-11-19 07:39:30,945 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807854645] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:30,945 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [963567836] [2022-11-19 07:39:30,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:30,945 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:30,945 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:30,946 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:30,975 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-19 07:39:31,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:31,070 INFO L263 TraceCheckSpWp]: Trace formula consists of 148 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-19 07:39:31,072 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:31,195 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_279 Int) (|v_ULTIMATE.start_main_#t~malloc11#1.base_21| Int) (|v_ULTIMATE.start_main_#t~malloc12#1.base_21| Int)) (let ((.cse0 (store |c_ULTIMATE.start_main_old_#valid#1| |v_ULTIMATE.start_main_#t~malloc11#1.base_21| 1))) (and (= |c_#valid| (store (store (store .cse0 |v_ULTIMATE.start_main_#t~malloc12#1.base_21| v_ArrVal_279) |v_ULTIMATE.start_main_#t~malloc11#1.base_21| 0) |v_ULTIMATE.start_main_#t~malloc12#1.base_21| 0)) (= (select |c_ULTIMATE.start_main_old_#valid#1| |v_ULTIMATE.start_main_#t~malloc11#1.base_21|) 0) (= (select .cse0 |v_ULTIMATE.start_main_#t~malloc12#1.base_21|) 0)))) is different from true [2022-11-19 07:39:31,196 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-19 07:39:31,196 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:39:31,197 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [963567836] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:31,197 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:39:31,197 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 11 [2022-11-19 07:39:31,197 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [695496272] [2022-11-19 07:39:31,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:31,198 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 07:39:31,198 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:31,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 07:39:31,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=80, Unknown=1, NotChecked=18, Total=132 [2022-11-19 07:39:31,199 INFO L87 Difference]: Start difference. First operand 60 states and 75 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:31,211 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:31,211 INFO L93 Difference]: Finished difference Result 62 states and 76 transitions. [2022-11-19 07:39:31,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:39:31,212 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-19 07:39:31,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:31,212 INFO L225 Difference]: With dead ends: 62 [2022-11-19 07:39:31,212 INFO L226 Difference]: Without dead ends: 60 [2022-11-19 07:39:31,213 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=80, Unknown=1, NotChecked=18, Total=132 [2022-11-19 07:39:31,213 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 1 mSDsluCounter, 24 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 35 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:31,214 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 42 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 9 Invalid, 0 Unknown, 35 Unchecked, 0.0s Time] [2022-11-19 07:39:31,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2022-11-19 07:39:31,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 56. [2022-11-19 07:39:31,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 51 states have (on average 1.3529411764705883) internal successors, (69), 55 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:31,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 69 transitions. [2022-11-19 07:39:31,216 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 69 transitions. Word has length 15 [2022-11-19 07:39:31,216 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:31,216 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 69 transitions. [2022-11-19 07:39:31,217 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:31,217 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 69 transitions. [2022-11-19 07:39:31,217 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-19 07:39:31,218 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:31,218 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:31,232 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:31,424 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:31,424 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:31,425 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:31,425 INFO L85 PathProgramCache]: Analyzing trace with hash -1835762402, now seen corresponding path program 2 times [2022-11-19 07:39:31,425 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:31,425 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1000713678] [2022-11-19 07:39:31,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:31,425 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:31,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:31,948 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:31,949 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:31,949 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1000713678] [2022-11-19 07:39:31,949 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1000713678] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:31,949 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1598050626] [2022-11-19 07:39:31,949 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:39:31,949 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:31,949 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:31,955 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:31,979 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-19 07:39:32,085 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-19 07:39:32,085 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:39:32,087 INFO L263 TraceCheckSpWp]: Trace formula consists of 153 conjuncts, 47 conjunts are in the unsatisfiable core [2022-11-19 07:39:32,090 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:32,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:39:32,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:39:32,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-19 07:39:32,745 INFO L321 Elim1Store]: treesize reduction 11, result has 47.6 percent of original size [2022-11-19 07:39:32,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 20 [2022-11-19 07:39:32,776 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 3 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:32,776 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:39:33,022 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:39:33,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 51 treesize of output 37 [2022-11-19 07:39:33,043 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:39:33,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 61 treesize of output 61 [2022-11-19 07:39:33,072 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:39:33,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 15 [2022-11-19 07:39:33,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:39:33,541 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:33,541 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1598050626] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:39:33,542 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [607422027] [2022-11-19 07:39:33,544 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-19 07:39:33,544 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:39:33,544 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:39:33,544 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:39:33,545 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:39:33,593 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:33,597 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:33,598 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:39:33,651 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:39:33,703 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:33,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:33,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:39:33,867 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-19 07:39:33,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-19 07:39:34,121 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:39:36,831 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2811#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-19 07:39:36,831 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:39:36,831 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:39:36,831 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 13, 13] total 34 [2022-11-19 07:39:36,832 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1286036873] [2022-11-19 07:39:36,832 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:39:36,832 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-19 07:39:36,832 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:36,833 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-19 07:39:36,834 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=160, Invalid=1646, Unknown=0, NotChecked=0, Total=1806 [2022-11-19 07:39:36,834 INFO L87 Difference]: Start difference. First operand 56 states and 69 transitions. Second operand has 34 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 34 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:38,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:38,899 INFO L93 Difference]: Finished difference Result 87 states and 103 transitions. [2022-11-19 07:39:38,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-19 07:39:38,900 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 34 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-19 07:39:38,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:38,901 INFO L225 Difference]: With dead ends: 87 [2022-11-19 07:39:38,901 INFO L226 Difference]: Without dead ends: 87 [2022-11-19 07:39:38,902 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 15 SyntacticMatches, 1 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 2 DeprecatedPredicates, 936 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=369, Invalid=3663, Unknown=0, NotChecked=0, Total=4032 [2022-11-19 07:39:38,903 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 132 mSDsluCounter, 370 mSDsCounter, 0 mSdLazyCounter, 710 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 391 SdHoareTripleChecker+Invalid, 823 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 710 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 92 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:38,903 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 391 Invalid, 823 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 710 Invalid, 0 Unknown, 92 Unchecked, 0.6s Time] [2022-11-19 07:39:38,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-11-19 07:39:38,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 63. [2022-11-19 07:39:38,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 58 states have (on average 1.3448275862068966) internal successors, (78), 62 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:38,906 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 78 transitions. [2022-11-19 07:39:38,906 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 78 transitions. Word has length 16 [2022-11-19 07:39:38,906 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:38,907 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 78 transitions. [2022-11-19 07:39:38,907 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 34 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:38,907 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 78 transitions. [2022-11-19 07:39:38,907 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-19 07:39:38,908 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:38,908 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:38,922 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:39,113 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:39,114 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:39,114 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:39,114 INFO L85 PathProgramCache]: Analyzing trace with hash -1818758752, now seen corresponding path program 1 times [2022-11-19 07:39:39,114 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:39,114 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1765034353] [2022-11-19 07:39:39,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:39,115 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:39,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:39,291 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:39:39,291 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:39,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1765034353] [2022-11-19 07:39:39,292 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1765034353] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:39,292 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:39:39,292 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 07:39:39,292 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1938197729] [2022-11-19 07:39:39,292 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:39,293 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 07:39:39,293 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:39,293 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 07:39:39,293 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 07:39:39,294 INFO L87 Difference]: Start difference. First operand 63 states and 78 transitions. Second operand has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:39,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:39,324 INFO L93 Difference]: Finished difference Result 62 states and 77 transitions. [2022-11-19 07:39:39,324 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-19 07:39:39,325 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-19 07:39:39,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:39,325 INFO L225 Difference]: With dead ends: 62 [2022-11-19 07:39:39,326 INFO L226 Difference]: Without dead ends: 59 [2022-11-19 07:39:39,326 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 1 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 07:39:39,327 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 10 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:39,327 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 26 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:39:39,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-19 07:39:39,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2022-11-19 07:39:39,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 55 states have (on average 1.290909090909091) internal successors, (71), 58 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:39,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 71 transitions. [2022-11-19 07:39:39,330 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 71 transitions. Word has length 18 [2022-11-19 07:39:39,332 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:39,332 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 71 transitions. [2022-11-19 07:39:39,332 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:39,332 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 71 transitions. [2022-11-19 07:39:39,334 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-19 07:39:39,335 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:39,335 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:39,335 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-11-19 07:39:39,335 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:39,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:39,336 INFO L85 PathProgramCache]: Analyzing trace with hash -1817780669, now seen corresponding path program 1 times [2022-11-19 07:39:39,336 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:39,336 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2061161422] [2022-11-19 07:39:39,336 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:39,337 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:39,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:39,618 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:39,618 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:39,618 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2061161422] [2022-11-19 07:39:39,618 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2061161422] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:39,618 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [644572120] [2022-11-19 07:39:39,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:39,619 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:39,619 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:39,620 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:39,643 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-19 07:39:39,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:39,757 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-19 07:39:39,759 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:39,822 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:39,963 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:39:39,966 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:39:39,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-19 07:39:39,988 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:39:39,988 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:39:39,989 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [644572120] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:39:39,989 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:39:39,989 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [8] total 16 [2022-11-19 07:39:39,989 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [985891989] [2022-11-19 07:39:39,989 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:39:39,989 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-19 07:39:39,989 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:39,990 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-19 07:39:39,990 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-11-19 07:39:39,990 INFO L87 Difference]: Start difference. First operand 59 states and 71 transitions. Second operand has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:40,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:40,058 INFO L93 Difference]: Finished difference Result 93 states and 109 transitions. [2022-11-19 07:39:40,058 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-19 07:39:40,059 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-19 07:39:40,059 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:40,059 INFO L225 Difference]: With dead ends: 93 [2022-11-19 07:39:40,059 INFO L226 Difference]: Without dead ends: 74 [2022-11-19 07:39:40,060 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 64 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=51, Invalid=255, Unknown=0, NotChecked=0, Total=306 [2022-11-19 07:39:40,060 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 19 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 37 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 65 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 37 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 42 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:40,061 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 65 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 37 Invalid, 0 Unknown, 42 Unchecked, 0.0s Time] [2022-11-19 07:39:40,061 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2022-11-19 07:39:40,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 71. [2022-11-19 07:39:40,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 67 states have (on average 1.2686567164179106) internal successors, (85), 70 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:40,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 85 transitions. [2022-11-19 07:39:40,063 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 85 transitions. Word has length 18 [2022-11-19 07:39:40,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:40,063 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 85 transitions. [2022-11-19 07:39:40,063 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:40,064 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 85 transitions. [2022-11-19 07:39:40,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-19 07:39:40,064 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:40,064 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:40,071 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:40,271 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2022-11-19 07:39:40,271 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:40,271 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:40,272 INFO L85 PathProgramCache]: Analyzing trace with hash -1536674092, now seen corresponding path program 3 times [2022-11-19 07:39:40,272 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:40,272 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [380812027] [2022-11-19 07:39:40,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:40,272 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:40,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:40,862 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:40,862 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:40,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [380812027] [2022-11-19 07:39:40,862 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [380812027] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:40,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1889585034] [2022-11-19 07:39:40,862 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-19 07:39:40,863 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:40,863 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:40,867 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:40,901 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-19 07:39:41,007 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-19 07:39:41,008 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:39:41,010 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-19 07:39:41,017 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:41,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:39:41,272 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:39:41,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-19 07:39:41,967 INFO L321 Elim1Store]: treesize reduction 8, result has 74.2 percent of original size [2022-11-19 07:39:41,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 41 treesize of output 37 [2022-11-19 07:39:42,119 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:42,119 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:39:42,817 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:39:42,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 77 treesize of output 49 [2022-11-19 07:39:42,843 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:39:42,844 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 86 treesize of output 90 [2022-11-19 07:39:42,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 22 [2022-11-19 07:39:42,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-19 07:39:43,201 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 14 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:39:43,201 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1889585034] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:39:43,202 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [607319702] [2022-11-19 07:39:43,203 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-19 07:39:43,204 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:39:43,204 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:39:43,204 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:39:43,205 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:39:43,251 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:43,254 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:43,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:39:43,299 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:39:43,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:43,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:43,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:39:43,551 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-19 07:39:43,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-19 07:39:43,769 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:39:48,879 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3527#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-19 07:39:48,879 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:39:48,879 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:39:48,879 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 16, 13] total 40 [2022-11-19 07:39:48,879 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [115267906] [2022-11-19 07:39:48,880 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:39:48,880 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-11-19 07:39:48,880 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:48,880 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-11-19 07:39:48,881 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=193, Invalid=2256, Unknown=1, NotChecked=0, Total=2450 [2022-11-19 07:39:48,881 INFO L87 Difference]: Start difference. First operand 71 states and 85 transitions. Second operand has 41 states, 40 states have (on average 1.4) internal successors, (56), 41 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:50,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:50,845 INFO L93 Difference]: Finished difference Result 128 states and 153 transitions. [2022-11-19 07:39:50,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-11-19 07:39:50,859 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 40 states have (on average 1.4) internal successors, (56), 41 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-19 07:39:50,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:50,862 INFO L225 Difference]: With dead ends: 128 [2022-11-19 07:39:50,862 INFO L226 Difference]: Without dead ends: 124 [2022-11-19 07:39:50,863 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 94 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 966 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=425, Invalid=4544, Unknown=1, NotChecked=0, Total=4970 [2022-11-19 07:39:50,864 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 116 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 594 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 771 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 594 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 158 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:50,865 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 265 Invalid, 771 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 594 Invalid, 0 Unknown, 158 Unchecked, 0.5s Time] [2022-11-19 07:39:50,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124 states. [2022-11-19 07:39:50,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124 to 100. [2022-11-19 07:39:50,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 96 states have (on average 1.2708333333333333) internal successors, (122), 99 states have internal predecessors, (122), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:50,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 122 transitions. [2022-11-19 07:39:50,869 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 122 transitions. Word has length 20 [2022-11-19 07:39:50,870 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:50,870 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 122 transitions. [2022-11-19 07:39:50,870 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 40 states have (on average 1.4) internal successors, (56), 41 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:50,870 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 122 transitions. [2022-11-19 07:39:50,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-19 07:39:50,872 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:50,872 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:50,879 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-19 07:39:51,078 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-19 07:39:51,078 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:51,079 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:51,079 INFO L85 PathProgramCache]: Analyzing trace with hash 1986422707, now seen corresponding path program 1 times [2022-11-19 07:39:51,079 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:51,079 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [936907900] [2022-11-19 07:39:51,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:51,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:51,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:51,430 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:39:51,430 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:51,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [936907900] [2022-11-19 07:39:51,430 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [936907900] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:51,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1711561396] [2022-11-19 07:39:51,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:51,430 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:51,431 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:51,432 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:51,455 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-19 07:39:51,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:51,559 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-19 07:39:51,561 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:51,681 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:39:51,681 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:39:51,844 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-19 07:39:51,869 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:39:51,869 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1711561396] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:39:51,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [886106185] [2022-11-19 07:39:51,871 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-19 07:39:51,872 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:39:51,872 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:39:51,872 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:39:51,872 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:39:51,933 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:51,937 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:39:51,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:39:51,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:52,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:52,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:52,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:52,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:52,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:39:52,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:39:52,358 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-19 07:39:52,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-19 07:39:52,576 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:39:52,579 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:39:52,582 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:39:52,651 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-19 07:39:52,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-19 07:39:52,930 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:39:52,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:39:53,108 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:39:53,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:39:53,224 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:39:57,589 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3955#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:39:57,590 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:39:57,590 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:39:57,590 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 8] total 20 [2022-11-19 07:39:57,590 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [763284110] [2022-11-19 07:39:57,590 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:39:57,591 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-11-19 07:39:57,591 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:39:57,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-11-19 07:39:57,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=177, Invalid=1155, Unknown=0, NotChecked=0, Total=1332 [2022-11-19 07:39:57,592 INFO L87 Difference]: Start difference. First operand 100 states and 122 transitions. Second operand has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:57,998 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:39:57,998 INFO L93 Difference]: Finished difference Result 115 states and 134 transitions. [2022-11-19 07:39:57,998 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-19 07:39:57,998 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-19 07:39:57,999 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:39:57,999 INFO L225 Difference]: With dead ends: 115 [2022-11-19 07:39:57,999 INFO L226 Difference]: Without dead ends: 115 [2022-11-19 07:39:58,000 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 37 SyntacticMatches, 2 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 505 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=275, Invalid=1705, Unknown=0, NotChecked=0, Total=1980 [2022-11-19 07:39:58,001 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 203 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 276 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 203 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 285 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 276 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 07:39:58,001 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [203 Valid, 96 Invalid, 285 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 276 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 07:39:58,002 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115 states. [2022-11-19 07:39:58,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115 to 105. [2022-11-19 07:39:58,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 101 states have (on average 1.2673267326732673) internal successors, (128), 104 states have internal predecessors, (128), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:58,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 128 transitions. [2022-11-19 07:39:58,005 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 128 transitions. Word has length 22 [2022-11-19 07:39:58,005 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:39:58,005 INFO L495 AbstractCegarLoop]: Abstraction has 105 states and 128 transitions. [2022-11-19 07:39:58,005 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:39:58,006 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 128 transitions. [2022-11-19 07:39:58,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-19 07:39:58,006 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:39:58,006 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:39:58,015 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-11-19 07:39:58,212 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:58,212 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:39:58,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:39:58,213 INFO L85 PathProgramCache]: Analyzing trace with hash 1214436490, now seen corresponding path program 4 times [2022-11-19 07:39:58,213 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:39:58,213 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1833042100] [2022-11-19 07:39:58,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:39:58,213 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:39:58,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:58,824 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:39:58,824 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:39:58,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1833042100] [2022-11-19 07:39:58,825 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1833042100] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:39:58,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1424472485] [2022-11-19 07:39:58,825 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-19 07:39:58,825 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:39:58,825 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:39:58,826 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:39:58,829 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-19 07:39:58,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:39:58,945 INFO L263 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 70 conjunts are in the unsatisfiable core [2022-11-19 07:39:58,948 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:39:58,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:39:59,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:39:59,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-19 07:40:00,283 INFO L321 Elim1Store]: treesize reduction 19, result has 53.7 percent of original size [2022-11-19 07:40:00,284 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 51 treesize of output 40 [2022-11-19 07:40:00,324 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:00,324 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:40:00,911 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:40:00,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 103 treesize of output 61 [2022-11-19 07:40:00,936 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:40:00,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 111 treesize of output 119 [2022-11-19 07:40:00,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 29 [2022-11-19 07:40:02,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:40:02,145 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 16 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:02,146 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1424472485] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:40:02,146 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1980224445] [2022-11-19 07:40:02,148 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-19 07:40:02,148 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:40:02,148 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:40:02,148 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:40:02,149 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:40:02,203 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:40:02,207 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:40:02,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:40:02,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:02,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:02,333 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:40:02,384 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-19 07:40:02,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-19 07:40:02,830 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:40:06,588 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4395#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-19 07:40:06,589 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:40:06,589 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:40:06,589 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 19, 19] total 50 [2022-11-19 07:40:06,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1258345427] [2022-11-19 07:40:06,589 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:40:06,590 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-19 07:40:06,590 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:06,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-19 07:40:06,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=253, Invalid=3287, Unknown=0, NotChecked=0, Total=3540 [2022-11-19 07:40:06,592 INFO L87 Difference]: Start difference. First operand 105 states and 128 transitions. Second operand has 50 states, 50 states have (on average 1.38) internal successors, (69), 50 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:10,218 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:10,218 INFO L93 Difference]: Finished difference Result 179 states and 207 transitions. [2022-11-19 07:40:10,219 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2022-11-19 07:40:10,219 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 50 states have (on average 1.38) internal successors, (69), 50 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-19 07:40:10,219 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:10,220 INFO L225 Difference]: With dead ends: 179 [2022-11-19 07:40:10,220 INFO L226 Difference]: Without dead ends: 174 [2022-11-19 07:40:10,222 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 26 SyntacticMatches, 1 SemanticMatches, 86 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1745 ImplicationChecksByTransitivity, 8.5s TimeCoverageRelationStatistics Valid=588, Invalid=7068, Unknown=0, NotChecked=0, Total=7656 [2022-11-19 07:40:10,223 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 196 mSDsluCounter, 589 mSDsCounter, 0 mSdLazyCounter, 1577 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 608 SdHoareTripleChecker+Invalid, 2118 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 1577 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 505 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:10,223 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [196 Valid, 608 Invalid, 2118 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 1577 Invalid, 0 Unknown, 505 Unchecked, 1.1s Time] [2022-11-19 07:40:10,224 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2022-11-19 07:40:10,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 139. [2022-11-19 07:40:10,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 135 states have (on average 1.2444444444444445) internal successors, (168), 138 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:10,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 168 transitions. [2022-11-19 07:40:10,227 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 168 transitions. Word has length 24 [2022-11-19 07:40:10,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:10,228 INFO L495 AbstractCegarLoop]: Abstraction has 139 states and 168 transitions. [2022-11-19 07:40:10,228 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 50 states have (on average 1.38) internal successors, (69), 50 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:10,228 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 168 transitions. [2022-11-19 07:40:10,228 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-19 07:40:10,229 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:10,229 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:10,240 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-11-19 07:40:10,434 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-11-19 07:40:10,434 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:40:10,435 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:10,435 INFO L85 PathProgramCache]: Analyzing trace with hash 890384639, now seen corresponding path program 1 times [2022-11-19 07:40:10,435 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:10,435 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [617102309] [2022-11-19 07:40:10,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:10,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:10,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:10,473 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-19 07:40:10,473 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:10,474 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [617102309] [2022-11-19 07:40:10,474 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [617102309] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:40:10,474 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:40:10,474 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 07:40:10,474 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1725294864] [2022-11-19 07:40:10,474 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:40:10,475 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:40:10,475 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:10,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:40:10,475 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:40:10,476 INFO L87 Difference]: Start difference. First operand 139 states and 168 transitions. Second operand has 3 states, 2 states have (on average 8.0) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:10,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:10,506 INFO L93 Difference]: Finished difference Result 139 states and 166 transitions. [2022-11-19 07:40:10,506 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:40:10,506 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 8.0) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-19 07:40:10,506 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:10,507 INFO L225 Difference]: With dead ends: 139 [2022-11-19 07:40:10,507 INFO L226 Difference]: Without dead ends: 125 [2022-11-19 07:40:10,507 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:40:10,508 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 1 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:10,508 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 19 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:40:10,509 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2022-11-19 07:40:10,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 120. [2022-11-19 07:40:10,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120 states, 116 states have (on average 1.2327586206896552) internal successors, (143), 119 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:10,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120 states to 120 states and 143 transitions. [2022-11-19 07:40:10,512 INFO L78 Accepts]: Start accepts. Automaton has 120 states and 143 transitions. Word has length 24 [2022-11-19 07:40:10,512 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:10,512 INFO L495 AbstractCegarLoop]: Abstraction has 120 states and 143 transitions. [2022-11-19 07:40:10,513 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 8.0) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:10,513 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 143 transitions. [2022-11-19 07:40:10,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-19 07:40:10,513 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:10,514 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:10,514 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable25 [2022-11-19 07:40:10,514 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:40:10,514 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:10,515 INFO L85 PathProgramCache]: Analyzing trace with hash -2000359841, now seen corresponding path program 1 times [2022-11-19 07:40:10,515 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:10,515 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [241955347] [2022-11-19 07:40:10,515 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:10,515 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:10,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:11,038 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:11,038 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:11,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [241955347] [2022-11-19 07:40:11,038 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [241955347] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:40:11,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1004561932] [2022-11-19 07:40:11,039 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:11,039 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:40:11,039 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:40:11,043 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:40:11,077 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-19 07:40:11,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:11,179 INFO L263 TraceCheckSpWp]: Trace formula consists of 217 conjuncts, 55 conjunts are in the unsatisfiable core [2022-11-19 07:40:11,181 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:40:11,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:40:11,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-19 07:40:11,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-19 07:40:11,693 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:40:11,696 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:40:11,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-19 07:40:11,731 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 1 proven. 5 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:40:11,732 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:40:11,809 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_522 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_522) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) 0)) is different from false [2022-11-19 07:40:11,818 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_522 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_522) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) 0)) is different from false [2022-11-19 07:40:11,831 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_522 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~dst#1.base| v_ArrVal_522) |c_ULTIMATE.start_cstrncat_~src#1.base|) (+ |c_ULTIMATE.start_cstrncat_~src#1.offset| 1)) 0)) is different from false [2022-11-19 07:40:11,838 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:40:11,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-19 07:40:11,846 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:40:11,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-19 07:40:11,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-19 07:40:12,056 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 1 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 3 not checked. [2022-11-19 07:40:12,056 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1004561932] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:40:12,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1229190221] [2022-11-19 07:40:12,057 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:40:12,058 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:40:12,058 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:40:12,058 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:40:12,058 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:40:12,099 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:40:12,103 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:40:12,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:40:12,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:12,192 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:12,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:12,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-19 07:40:12,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:12,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:12,451 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:40:12,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:40:12,642 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:40:12,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:40:13,676 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:40:13,678 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:40:13,682 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:40:13,784 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-19 07:40:13,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1022 treesize of output 1029 [2022-11-19 07:40:14,426 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:40:14,479 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:40:14,486 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:40:14,544 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:40:14,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:40:14,712 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:40:14,712 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:40:14,888 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:40:14,909 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:40:21,853 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5227#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.base_31| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_30| Int)) (and (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_31|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_30|) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (= (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_31|) 1) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_31|) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_31|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_30|) 0)) (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_30| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_31|)) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_30|))) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:40:21,853 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:40:21,853 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:40:21,853 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 13, 13] total 36 [2022-11-19 07:40:21,853 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [808050123] [2022-11-19 07:40:21,854 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:40:21,854 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-19 07:40:21,854 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:21,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-19 07:40:21,855 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=175, Invalid=2284, Unknown=3, NotChecked=294, Total=2756 [2022-11-19 07:40:21,855 INFO L87 Difference]: Start difference. First operand 120 states and 143 transitions. Second operand has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:23,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:23,360 INFO L93 Difference]: Finished difference Result 162 states and 189 transitions. [2022-11-19 07:40:23,361 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-19 07:40:23,361 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-11-19 07:40:23,361 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:23,363 INFO L225 Difference]: With dead ends: 162 [2022-11-19 07:40:23,363 INFO L226 Difference]: Without dead ends: 144 [2022-11-19 07:40:23,365 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 39 SyntacticMatches, 1 SemanticMatches, 71 ConstructedPredicates, 3 IntricatePredicates, 1 DeprecatedPredicates, 1003 ImplicationChecksByTransitivity, 8.9s TimeCoverageRelationStatistics Valid=352, Invalid=4485, Unknown=5, NotChecked=414, Total=5256 [2022-11-19 07:40:23,366 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 58 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 358 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 181 SdHoareTripleChecker+Invalid, 522 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 358 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 157 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:23,366 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 181 Invalid, 522 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 358 Invalid, 0 Unknown, 157 Unchecked, 0.3s Time] [2022-11-19 07:40:23,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 144 states. [2022-11-19 07:40:23,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 144 to 141. [2022-11-19 07:40:23,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 137 states have (on average 1.2116788321167884) internal successors, (166), 140 states have internal predecessors, (166), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:23,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 166 transitions. [2022-11-19 07:40:23,374 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 166 transitions. Word has length 26 [2022-11-19 07:40:23,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:23,375 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 166 transitions. [2022-11-19 07:40:23,375 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:23,375 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 166 transitions. [2022-11-19 07:40:23,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-19 07:40:23,377 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:23,377 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:23,391 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-19 07:40:23,591 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-19 07:40:23,591 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:40:23,591 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:23,591 INFO L85 PathProgramCache]: Analyzing trace with hash 2038601280, now seen corresponding path program 5 times [2022-11-19 07:40:23,591 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:23,591 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [794998927] [2022-11-19 07:40:23,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:23,592 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:23,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:24,297 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:24,298 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:24,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [794998927] [2022-11-19 07:40:24,298 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [794998927] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:40:24,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [459135326] [2022-11-19 07:40:24,298 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:40:24,298 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:40:24,298 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:40:24,306 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:40:24,331 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-19 07:40:24,491 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-19 07:40:24,491 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:40:24,494 INFO L263 TraceCheckSpWp]: Trace formula consists of 225 conjuncts, 76 conjunts are in the unsatisfiable core [2022-11-19 07:40:24,499 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:40:24,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:40:24,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:40:24,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-19 07:40:25,948 INFO L321 Elim1Store]: treesize reduction 23, result has 54.9 percent of original size [2022-11-19 07:40:25,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 52 treesize of output 50 [2022-11-19 07:40:25,994 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 5 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:25,994 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:40:26,694 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_565 (Array Int Int))) (let ((.cse0 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_565) |c_ULTIMATE.start_main_~nondetString1~0#1.base|))) (or (= (select .cse0 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|) 0) (= (select .cse0 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0) (= (select .cse0 (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)))) is different from false [2022-11-19 07:40:26,709 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:40:26,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 129 treesize of output 73 [2022-11-19 07:40:26,742 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:40:26,742 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 136 treesize of output 148 [2022-11-19 07:40:26,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 54 treesize of output 36 [2022-11-19 07:40:27,742 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:40:27,768 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 25 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:27,768 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [459135326] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:40:27,768 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [937822106] [2022-11-19 07:40:27,770 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-19 07:40:27,770 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:40:27,770 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:40:27,771 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:40:27,771 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:40:27,807 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:40:27,811 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:40:27,812 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:40:27,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:40:27,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:27,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:40:27,960 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-19 07:40:27,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-19 07:40:28,381 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:40:32,256 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5806#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-19 07:40:32,256 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:40:32,256 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:40:32,256 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 21, 21] total 56 [2022-11-19 07:40:32,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1409647548] [2022-11-19 07:40:32,256 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:40:32,257 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2022-11-19 07:40:32,257 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:32,257 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2022-11-19 07:40:32,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=275, Invalid=3888, Unknown=1, NotChecked=126, Total=4290 [2022-11-19 07:40:32,259 INFO L87 Difference]: Start difference. First operand 141 states and 166 transitions. Second operand has 56 states, 56 states have (on average 1.4464285714285714) internal successors, (81), 56 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:43,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:43,457 INFO L93 Difference]: Finished difference Result 200 states and 234 transitions. [2022-11-19 07:40:43,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-11-19 07:40:43,458 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 56 states have (on average 1.4464285714285714) internal successors, (81), 56 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-19 07:40:43,458 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:43,459 INFO L225 Difference]: With dead ends: 200 [2022-11-19 07:40:43,459 INFO L226 Difference]: Without dead ends: 186 [2022-11-19 07:40:43,460 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 34 SyntacticMatches, 1 SemanticMatches, 92 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 2036 ImplicationChecksByTransitivity, 16.8s TimeCoverageRelationStatistics Valid=597, Invalid=7962, Unknown=1, NotChecked=182, Total=8742 [2022-11-19 07:40:43,460 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 223 mSDsluCounter, 394 mSDsCounter, 0 mSdLazyCounter, 1067 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 223 SdHoareTripleChecker+Valid, 412 SdHoareTripleChecker+Invalid, 1335 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 1067 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 250 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:43,461 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [223 Valid, 412 Invalid, 1335 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 1067 Invalid, 0 Unknown, 250 Unchecked, 0.8s Time] [2022-11-19 07:40:43,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 186 states. [2022-11-19 07:40:43,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 186 to 168. [2022-11-19 07:40:43,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 164 states have (on average 1.225609756097561) internal successors, (201), 167 states have internal predecessors, (201), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:43,465 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 201 transitions. [2022-11-19 07:40:43,465 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 201 transitions. Word has length 28 [2022-11-19 07:40:43,465 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:43,465 INFO L495 AbstractCegarLoop]: Abstraction has 168 states and 201 transitions. [2022-11-19 07:40:43,465 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 56 states have (on average 1.4464285714285714) internal successors, (81), 56 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:43,466 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 201 transitions. [2022-11-19 07:40:43,466 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-19 07:40:43,466 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:43,466 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:43,475 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-19 07:40:43,672 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-19 07:40:43,672 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:40:43,672 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:43,672 INFO L85 PathProgramCache]: Analyzing trace with hash -1020966952, now seen corresponding path program 1 times [2022-11-19 07:40:43,673 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:43,673 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694457730] [2022-11-19 07:40:43,673 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:43,673 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:43,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:44,277 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:44,277 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:44,277 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694457730] [2022-11-19 07:40:44,277 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694457730] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:40:44,278 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1206903198] [2022-11-19 07:40:44,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:44,278 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:40:44,278 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:40:44,279 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:40:44,306 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-19 07:40:44,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:44,442 INFO L263 TraceCheckSpWp]: Trace formula consists of 228 conjuncts, 57 conjunts are in the unsatisfiable core [2022-11-19 07:40:44,447 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:40:44,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:40:44,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:44,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-19 07:40:45,037 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-19 07:40:45,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-19 07:40:45,075 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 1 proven. 5 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-19 07:40:45,076 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:40:45,163 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_607 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_607) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|))) is different from false [2022-11-19 07:40:45,263 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_607 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~dst#1.base| v_ArrVal_607) |c_ULTIMATE.start_cstrncat_~src#1.base|) (+ |c_ULTIMATE.start_cstrncat_~src#1.offset| 1)) 0)) is different from false [2022-11-19 07:40:45,272 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:40:45,272 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-19 07:40:45,280 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:40:45,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-19 07:40:45,489 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 1 proven. 3 refuted. 0 times theorem prover too weak. 6 trivial. 2 not checked. [2022-11-19 07:40:45,489 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1206903198] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:40:45,490 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1467965283] [2022-11-19 07:40:45,496 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:40:45,497 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:40:45,497 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:40:45,497 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:40:45,498 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:40:45,537 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:40:45,541 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:40:45,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:40:45,581 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:45,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:45,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:45,712 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-19 07:40:45,761 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:45,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:40:45,913 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:40:45,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:40:46,085 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:40:46,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:40:46,829 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:40:46,841 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:40:46,944 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:40:46,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:40:47,113 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-19 07:40:47,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-19 07:40:47,317 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:40:47,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:40:47,451 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:40:47,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:40:47,667 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:40:47,685 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:40:54,325 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6435#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:40:54,325 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:40:54,325 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:40:54,326 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 12, 13] total 33 [2022-11-19 07:40:54,326 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1216795509] [2022-11-19 07:40:54,326 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:40:54,326 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-19 07:40:54,326 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:54,327 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-19 07:40:54,327 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=137, Invalid=2023, Unknown=10, NotChecked=182, Total=2352 [2022-11-19 07:40:54,328 INFO L87 Difference]: Start difference. First operand 168 states and 201 transitions. Second operand has 33 states, 33 states have (on average 2.0303030303030303) internal successors, (67), 33 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:55,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:55,812 INFO L93 Difference]: Finished difference Result 238 states and 281 transitions. [2022-11-19 07:40:55,814 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-19 07:40:55,814 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 2.0303030303030303) internal successors, (67), 33 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-19 07:40:55,814 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:55,815 INFO L225 Difference]: With dead ends: 238 [2022-11-19 07:40:55,815 INFO L226 Difference]: Without dead ends: 199 [2022-11-19 07:40:55,816 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 48 SyntacticMatches, 3 SemanticMatches, 67 ConstructedPredicates, 2 IntricatePredicates, 1 DeprecatedPredicates, 891 ImplicationChecksByTransitivity, 8.8s TimeCoverageRelationStatistics Valid=296, Invalid=4122, Unknown=12, NotChecked=262, Total=4692 [2022-11-19 07:40:55,817 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 42 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 343 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 496 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 343 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 146 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:55,817 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 128 Invalid, 496 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 343 Invalid, 0 Unknown, 146 Unchecked, 0.3s Time] [2022-11-19 07:40:55,817 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 199 states. [2022-11-19 07:40:55,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 199 to 175. [2022-11-19 07:40:55,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 171 states have (on average 1.2339181286549707) internal successors, (211), 174 states have internal predecessors, (211), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:55,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 211 transitions. [2022-11-19 07:40:55,821 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 211 transitions. Word has length 28 [2022-11-19 07:40:55,822 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:55,822 INFO L495 AbstractCegarLoop]: Abstraction has 175 states and 211 transitions. [2022-11-19 07:40:55,822 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 2.0303030303030303) internal successors, (67), 33 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:40:55,822 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 211 transitions. [2022-11-19 07:40:55,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-19 07:40:55,823 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:55,823 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:55,828 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-19 07:40:56,028 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-19 07:40:56,028 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:40:56,029 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:56,029 INFO L85 PathProgramCache]: Analyzing trace with hash -984516838, now seen corresponding path program 1 times [2022-11-19 07:40:56,029 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:56,029 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [27674079] [2022-11-19 07:40:56,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:56,029 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:56,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:58,586 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 4 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:58,587 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:58,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [27674079] [2022-11-19 07:40:58,587 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [27674079] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:40:58,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [844678486] [2022-11-19 07:40:58,587 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:58,587 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:40:58,587 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:40:58,588 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:40:58,591 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-19 07:40:58,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:58,719 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 55 conjunts are in the unsatisfiable core [2022-11-19 07:40:58,721 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:40:58,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:40:59,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:40:59,389 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-19 07:41:00,012 INFO L321 Elim1Store]: treesize reduction 11, result has 47.6 percent of original size [2022-11-19 07:41:00,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 20 [2022-11-19 07:41:00,082 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:41:00,082 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:41:00,629 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:41:00,630 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 53 treesize of output 39 [2022-11-19 07:41:00,643 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:41:00,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 63 [2022-11-19 07:41:00,648 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2022-11-19 07:41:01,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:41:01,494 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:41:01,494 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [844678486] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:41:01,494 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [455313646] [2022-11-19 07:41:01,495 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:41:01,496 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:41:01,496 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:41:01,496 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:41:01,496 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:41:01,550 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:41:01,555 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:41:01,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:41:01,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:01,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:01,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:01,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-19 07:41:01,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:01,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:01,910 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:41:01,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:41:02,100 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:41:02,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:41:02,953 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:02,974 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:03,087 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:41:03,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:41:03,183 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:03,208 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:41:09,273 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7121#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:41:09,274 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:41:09,274 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:41:09,274 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 16, 16] total 47 [2022-11-19 07:41:09,274 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [816219172] [2022-11-19 07:41:09,274 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:41:09,275 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-19 07:41:09,275 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:41:09,275 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-19 07:41:09,276 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=253, Invalid=3653, Unknown=0, NotChecked=0, Total=3906 [2022-11-19 07:41:09,277 INFO L87 Difference]: Start difference. First operand 175 states and 211 transitions. Second operand has 48 states, 48 states have (on average 1.5833333333333333) internal successors, (76), 47 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:41:12,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:41:12,928 INFO L93 Difference]: Finished difference Result 190 states and 225 transitions. [2022-11-19 07:41:12,928 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-19 07:41:12,929 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 1.5833333333333333) internal successors, (76), 47 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-19 07:41:12,929 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:41:12,930 INFO L225 Difference]: With dead ends: 190 [2022-11-19 07:41:12,930 INFO L226 Difference]: Without dead ends: 181 [2022-11-19 07:41:12,931 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 42 SyntacticMatches, 2 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1517 ImplicationChecksByTransitivity, 12.2s TimeCoverageRelationStatistics Valid=541, Invalid=6101, Unknown=0, NotChecked=0, Total=6642 [2022-11-19 07:41:12,931 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 94 mSDsluCounter, 206 mSDsCounter, 0 mSdLazyCounter, 541 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 216 SdHoareTripleChecker+Invalid, 653 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 541 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 99 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-19 07:41:12,932 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [94 Valid, 216 Invalid, 653 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 541 Invalid, 0 Unknown, 99 Unchecked, 0.6s Time] [2022-11-19 07:41:12,932 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 181 states. [2022-11-19 07:41:12,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 181 to 175. [2022-11-19 07:41:12,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 171 states have (on average 1.2280701754385965) internal successors, (210), 174 states have internal predecessors, (210), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:41:12,936 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 210 transitions. [2022-11-19 07:41:12,936 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 210 transitions. Word has length 29 [2022-11-19 07:41:12,937 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:41:12,937 INFO L495 AbstractCegarLoop]: Abstraction has 175 states and 210 transitions. [2022-11-19 07:41:12,937 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 1.5833333333333333) internal successors, (76), 47 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:41:12,937 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 210 transitions. [2022-11-19 07:41:12,938 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-19 07:41:12,938 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:41:12,938 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:41:12,951 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-19 07:41:13,143 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:41:13,144 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:41:13,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:41:13,144 INFO L85 PathProgramCache]: Analyzing trace with hash 494992719, now seen corresponding path program 2 times [2022-11-19 07:41:13,144 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:41:13,144 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [735720572] [2022-11-19 07:41:13,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:41:13,145 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:41:13,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:41:13,456 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 12 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:41:13,456 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:41:13,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [735720572] [2022-11-19 07:41:13,457 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [735720572] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:41:13,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [726262764] [2022-11-19 07:41:13,457 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:41:13,457 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:41:13,457 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:41:13,459 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:41:13,481 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-19 07:41:13,624 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-19 07:41:13,624 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:41:13,627 INFO L263 TraceCheckSpWp]: Trace formula consists of 204 conjuncts, 74 conjunts are in the unsatisfiable core [2022-11-19 07:41:13,629 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:41:13,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-19 07:41:14,317 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-19 07:41:14,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 32 treesize of output 42 [2022-11-19 07:41:14,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-19 07:41:14,354 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:41:14,356 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:41:14,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 10 [2022-11-19 07:41:14,722 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:41:14,728 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:41:14,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 19 [2022-11-19 07:41:14,935 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-19 07:41:14,935 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:41:15,857 INFO L321 Elim1Store]: treesize reduction 16, result has 66.7 percent of original size [2022-11-19 07:41:15,857 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 71 treesize of output 87 [2022-11-19 07:41:15,879 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:41:15,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 51 [2022-11-19 07:41:15,887 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-19 07:41:15,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2022-11-19 07:41:15,948 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:41:15,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 53 treesize of output 63 [2022-11-19 07:41:16,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-19 07:41:16,571 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-19 07:41:16,572 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [726262764] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:41:16,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1619834876] [2022-11-19 07:41:16,573 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:41:16,573 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:41:16,574 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:41:16,574 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:41:16,574 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:41:16,618 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:41:16,622 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:41:16,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:41:16,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:16,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:16,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:41:16,803 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-19 07:41:16,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-19 07:41:16,854 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:16,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:16,985 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:41:16,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:41:17,172 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:41:17,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:41:18,080 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:41:18,082 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:41:18,086 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:41:18,206 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-19 07:41:18,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1026 treesize of output 1019 [2022-11-19 07:41:18,466 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:18,470 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:18,484 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:18,490 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:19,362 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:19,423 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:41:19,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:41:19,576 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:41:19,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:41:19,753 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:19,771 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:41:28,557 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7756#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-19 07:41:28,558 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:41:28,558 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:41:28,558 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 17, 17] total 41 [2022-11-19 07:41:28,559 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1874140586] [2022-11-19 07:41:28,559 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:41:28,560 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-11-19 07:41:28,560 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:41:28,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-11-19 07:41:28,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=278, Invalid=3137, Unknown=7, NotChecked=0, Total=3422 [2022-11-19 07:41:28,562 INFO L87 Difference]: Start difference. First operand 175 states and 210 transitions. Second operand has 42 states, 41 states have (on average 1.853658536585366) internal successors, (76), 42 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:41:30,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:41:30,079 INFO L93 Difference]: Finished difference Result 195 states and 230 transitions. [2022-11-19 07:41:30,079 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-19 07:41:30,079 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 41 states have (on average 1.853658536585366) internal successors, (76), 42 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-11-19 07:41:30,079 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:41:30,080 INFO L225 Difference]: With dead ends: 195 [2022-11-19 07:41:30,080 INFO L226 Difference]: Without dead ends: 193 [2022-11-19 07:41:30,081 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 40 SyntacticMatches, 1 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1342 ImplicationChecksByTransitivity, 12.0s TimeCoverageRelationStatistics Valid=559, Invalid=5592, Unknown=11, NotChecked=0, Total=6162 [2022-11-19 07:41:30,081 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 48 mSDsluCounter, 90 mSDsCounter, 0 mSdLazyCounter, 260 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 426 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 260 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 162 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 07:41:30,082 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 96 Invalid, 426 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 260 Invalid, 0 Unknown, 162 Unchecked, 0.2s Time] [2022-11-19 07:41:30,082 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2022-11-19 07:41:30,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 190. [2022-11-19 07:41:30,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 190 states, 186 states have (on average 1.2204301075268817) internal successors, (227), 189 states have internal predecessors, (227), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:41:30,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 227 transitions. [2022-11-19 07:41:30,087 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 227 transitions. Word has length 30 [2022-11-19 07:41:30,087 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:41:30,087 INFO L495 AbstractCegarLoop]: Abstraction has 190 states and 227 transitions. [2022-11-19 07:41:30,087 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 41 states have (on average 1.853658536585366) internal successors, (76), 42 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:41:30,087 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 227 transitions. [2022-11-19 07:41:30,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-19 07:41:30,088 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:41:30,088 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:41:30,103 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-19 07:41:30,295 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable30 [2022-11-19 07:41:30,296 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:41:30,296 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:41:30,296 INFO L85 PathProgramCache]: Analyzing trace with hash -1277104003, now seen corresponding path program 2 times [2022-11-19 07:41:30,296 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:41:30,296 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1634497252] [2022-11-19 07:41:30,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:41:30,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:41:30,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:41:31,145 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 4 proven. 24 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:41:31,146 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:41:31,146 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1634497252] [2022-11-19 07:41:31,146 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1634497252] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:41:31,146 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [922126620] [2022-11-19 07:41:31,146 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:41:31,146 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:41:31,147 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:41:31,155 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:41:31,164 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-19 07:41:31,377 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-19 07:41:31,378 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:41:31,381 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 93 conjunts are in the unsatisfiable core [2022-11-19 07:41:31,383 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:41:31,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:41:31,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-19 07:41:32,170 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-19 07:41:32,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 32 [2022-11-19 07:41:33,818 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:41:33,855 INFO L321 Elim1Store]: treesize reduction 8, result has 80.5 percent of original size [2022-11-19 07:41:33,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 2 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 3 case distinctions, treesize of input 53 treesize of output 50 [2022-11-19 07:41:34,095 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 7 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:41:34,095 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:41:35,282 INFO L321 Elim1Store]: treesize reduction 46, result has 43.2 percent of original size [2022-11-19 07:41:35,282 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 122 treesize of output 130 [2022-11-19 07:41:35,305 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:41:35,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 46 treesize of output 46 [2022-11-19 07:41:35,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-19 07:41:35,335 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:41:35,335 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:41:35,359 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:41:35,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 49 treesize of output 64 [2022-11-19 07:41:37,314 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:41:37,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:41:37,640 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 20 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:41:37,640 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [922126620] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:41:37,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [276498290] [2022-11-19 07:41:37,642 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:41:37,642 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:41:37,642 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:41:37,642 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:41:37,643 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:41:37,686 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:41:37,692 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:41:37,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:41:37,742 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:41:37,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:37,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:37,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-19 07:41:37,949 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:37,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:38,087 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:41:38,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:41:38,291 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:41:38,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:41:39,175 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:39,211 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:39,317 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:41:39,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:41:39,410 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:39,427 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:41:45,781 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8432#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:41:45,781 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:41:45,781 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:41:45,781 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 18, 19] total 52 [2022-11-19 07:41:45,781 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1114662552] [2022-11-19 07:41:45,782 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:41:45,782 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-11-19 07:41:45,782 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:41:45,782 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-11-19 07:41:45,783 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=343, Invalid=4213, Unknown=0, NotChecked=0, Total=4556 [2022-11-19 07:41:45,783 INFO L87 Difference]: Start difference. First operand 190 states and 227 transitions. Second operand has 53 states, 52 states have (on average 1.6346153846153846) internal successors, (85), 53 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:41:51,226 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:41:51,227 INFO L93 Difference]: Finished difference Result 261 states and 299 transitions. [2022-11-19 07:41:51,227 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-11-19 07:41:51,227 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 52 states have (on average 1.6346153846153846) internal successors, (85), 53 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-19 07:41:51,227 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:41:51,228 INFO L225 Difference]: With dead ends: 261 [2022-11-19 07:41:51,228 INFO L226 Difference]: Without dead ends: 238 [2022-11-19 07:41:51,229 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 42 SyntacticMatches, 1 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2569 ImplicationChecksByTransitivity, 14.7s TimeCoverageRelationStatistics Valid=986, Invalid=9520, Unknown=0, NotChecked=0, Total=10506 [2022-11-19 07:41:51,229 INFO L413 NwaCegarLoop]: 22 mSDtfsCounter, 189 mSDsluCounter, 390 mSDsCounter, 0 mSdLazyCounter, 963 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 412 SdHoareTripleChecker+Invalid, 1234 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 963 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 244 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:41:51,230 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [189 Valid, 412 Invalid, 1234 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 963 Invalid, 0 Unknown, 244 Unchecked, 1.0s Time] [2022-11-19 07:41:51,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 238 states. [2022-11-19 07:41:51,235 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 238 to 188. [2022-11-19 07:41:51,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 184 states have (on average 1.2065217391304348) internal successors, (222), 187 states have internal predecessors, (222), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:41:51,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 222 transitions. [2022-11-19 07:41:51,236 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 222 transitions. Word has length 31 [2022-11-19 07:41:51,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:41:51,237 INFO L495 AbstractCegarLoop]: Abstraction has 188 states and 222 transitions. [2022-11-19 07:41:51,237 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 52 states have (on average 1.6346153846153846) internal successors, (85), 53 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:41:51,237 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 222 transitions. [2022-11-19 07:41:51,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-19 07:41:51,238 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:41:51,238 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:41:51,247 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Ended with exit code 0 [2022-11-19 07:41:51,443 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-11-19 07:41:51,443 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:41:51,443 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:41:51,444 INFO L85 PathProgramCache]: Analyzing trace with hash -1835093626, now seen corresponding path program 2 times [2022-11-19 07:41:51,444 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:41:51,444 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960944735] [2022-11-19 07:41:51,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:41:51,444 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:41:51,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:41:51,938 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:41:51,938 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:41:51,939 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960944735] [2022-11-19 07:41:51,939 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960944735] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:41:51,939 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1907084787] [2022-11-19 07:41:51,939 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:41:51,939 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:41:51,939 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:41:51,940 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:41:51,963 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-19 07:41:52,219 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-19 07:41:52,220 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:41:52,221 INFO L263 TraceCheckSpWp]: Trace formula consists of 237 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-19 07:41:52,223 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:41:52,239 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-19 07:41:52,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-19 07:41:52,403 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:41:52,403 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:41:52,721 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:41:52,722 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1907084787] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:41:52,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1152831686] [2022-11-19 07:41:52,723 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-19 07:41:52,724 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:41:52,724 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:41:52,724 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:41:52,724 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:41:52,773 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:41:52,777 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:41:52,779 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:41:52,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:41:52,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:52,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:52,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-19 07:41:52,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:53,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:41:53,120 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:41:53,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:41:53,284 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:41:53,284 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:41:54,418 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:41:54,420 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:41:54,425 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:41:54,548 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-19 07:41:54,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1032 treesize of output 1029 [2022-11-19 07:41:55,171 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:55,193 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:55,203 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:55,259 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:41:55,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:41:55,420 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:41:55,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:41:55,543 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:41:55,578 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:42:02,079 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9176#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:42:02,079 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:42:02,079 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:42:02,079 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 10] total 26 [2022-11-19 07:42:02,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1059390550] [2022-11-19 07:42:02,079 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:42:02,080 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-19 07:42:02,080 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:42:02,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-19 07:42:02,081 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=1616, Unknown=0, NotChecked=0, Total=1806 [2022-11-19 07:42:02,081 INFO L87 Difference]: Start difference. First operand 188 states and 222 transitions. Second operand has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:42:02,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:42:02,795 INFO L93 Difference]: Finished difference Result 213 states and 240 transitions. [2022-11-19 07:42:02,795 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-19 07:42:02,795 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-19 07:42:02,796 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:42:02,796 INFO L225 Difference]: With dead ends: 213 [2022-11-19 07:42:02,797 INFO L226 Difference]: Without dead ends: 213 [2022-11-19 07:42:02,797 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 688 ImplicationChecksByTransitivity, 7.3s TimeCoverageRelationStatistics Valid=371, Invalid=2385, Unknown=0, NotChecked=0, Total=2756 [2022-11-19 07:42:02,798 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 366 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 399 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 366 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 409 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 399 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 07:42:02,798 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [366 Valid, 106 Invalid, 409 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 399 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-19 07:42:02,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2022-11-19 07:42:02,802 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 199. [2022-11-19 07:42:02,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 199 states, 195 states have (on average 1.1948717948717948) internal successors, (233), 198 states have internal predecessors, (233), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:42:02,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 199 states to 199 states and 233 transitions. [2022-11-19 07:42:02,804 INFO L78 Accepts]: Start accepts. Automaton has 199 states and 233 transitions. Word has length 31 [2022-11-19 07:42:02,804 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:42:02,804 INFO L495 AbstractCegarLoop]: Abstraction has 199 states and 233 transitions. [2022-11-19 07:42:02,804 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:42:02,805 INFO L276 IsEmpty]: Start isEmpty. Operand 199 states and 233 transitions. [2022-11-19 07:42:02,805 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-19 07:42:02,805 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:42:02,805 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:42:02,812 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-19 07:42:03,012 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-11-19 07:42:03,012 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:42:03,012 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:42:03,012 INFO L85 PathProgramCache]: Analyzing trace with hash 110476278, now seen corresponding path program 6 times [2022-11-19 07:42:03,012 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:42:03,012 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1055824990] [2022-11-19 07:42:03,013 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:42:03,013 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:42:03,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:42:03,949 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:42:03,949 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:42:03,949 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1055824990] [2022-11-19 07:42:03,950 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1055824990] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:42:03,950 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1551233018] [2022-11-19 07:42:03,950 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-19 07:42:03,950 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:42:03,950 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:42:03,951 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:42:03,954 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-19 07:42:04,117 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-19 07:42:04,117 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:42:04,120 INFO L263 TraceCheckSpWp]: Trace formula consists of 249 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-19 07:42:04,122 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:42:04,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:42:04,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:42:04,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-19 07:42:05,930 INFO L321 Elim1Store]: treesize reduction 27, result has 55.7 percent of original size [2022-11-19 07:42:05,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 60 treesize of output 60 [2022-11-19 07:42:05,990 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 6 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:42:05,990 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:42:07,182 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:42:07,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 155 treesize of output 85 [2022-11-19 07:42:07,224 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:42:07,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 161 treesize of output 177 [2022-11-19 07:42:07,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 15 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 0 case distinctions, treesize of input 65 treesize of output 43 [2022-11-19 07:42:07,907 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-19 07:42:08,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:42:08,822 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 36 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:42:08,822 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1551233018] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:42:08,822 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [59246836] [2022-11-19 07:42:08,823 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-19 07:42:08,823 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:42:08,824 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:42:08,824 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:42:08,824 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:42:08,859 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:42:08,864 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:42:08,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:42:08,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:42:08,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:42:08,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:42:09,004 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-19 07:42:09,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-19 07:42:09,312 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:42:13,871 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9876#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-19 07:42:13,871 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:42:13,871 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:42:13,871 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 25, 25] total 66 [2022-11-19 07:42:13,871 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [973270994] [2022-11-19 07:42:13,871 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:42:13,872 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 66 states [2022-11-19 07:42:13,872 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:42:13,872 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 66 interpolants. [2022-11-19 07:42:13,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=333, Invalid=5357, Unknown=10, NotChecked=0, Total=5700 [2022-11-19 07:42:13,873 INFO L87 Difference]: Start difference. First operand 199 states and 233 transitions. Second operand has 66 states, 66 states have (on average 1.4090909090909092) internal successors, (93), 66 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:42:35,872 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:42:35,872 INFO L93 Difference]: Finished difference Result 361 states and 407 transitions. [2022-11-19 07:42:35,872 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 58 states. [2022-11-19 07:42:35,872 INFO L78 Accepts]: Start accepts. Automaton has has 66 states, 66 states have (on average 1.4090909090909092) internal successors, (93), 66 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-11-19 07:42:35,872 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:42:35,874 INFO L225 Difference]: With dead ends: 361 [2022-11-19 07:42:35,874 INFO L226 Difference]: Without dead ends: 319 [2022-11-19 07:42:35,875 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 41 SyntacticMatches, 1 SemanticMatches, 120 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3578 ImplicationChecksByTransitivity, 28.7s TimeCoverageRelationStatistics Valid=928, Invalid=13821, Unknown=13, NotChecked=0, Total=14762 [2022-11-19 07:42:35,876 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 212 mSDsluCounter, 873 mSDsCounter, 0 mSdLazyCounter, 1949 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 899 SdHoareTripleChecker+Invalid, 2854 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 1949 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 873 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-19 07:42:35,876 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 899 Invalid, 2854 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 1949 Invalid, 0 Unknown, 873 Unchecked, 1.6s Time] [2022-11-19 07:42:35,877 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 319 states. [2022-11-19 07:42:35,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 319 to 230. [2022-11-19 07:42:35,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 226 states have (on average 1.1946902654867257) internal successors, (270), 229 states have internal predecessors, (270), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:42:35,882 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 270 transitions. [2022-11-19 07:42:35,882 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 270 transitions. Word has length 32 [2022-11-19 07:42:35,882 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:42:35,883 INFO L495 AbstractCegarLoop]: Abstraction has 230 states and 270 transitions. [2022-11-19 07:42:35,883 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 66 states, 66 states have (on average 1.4090909090909092) internal successors, (93), 66 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:42:35,883 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 270 transitions. [2022-11-19 07:42:35,883 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-19 07:42:35,884 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:42:35,884 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:42:35,891 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-19 07:42:36,090 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33,24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:42:36,090 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:42:36,091 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:42:36,091 INFO L85 PathProgramCache]: Analyzing trace with hash -1053327526, now seen corresponding path program 1 times [2022-11-19 07:42:36,091 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:42:36,091 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1482993063] [2022-11-19 07:42:36,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:42:36,091 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:42:36,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:42:36,459 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 2 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:42:36,459 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:42:36,460 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1482993063] [2022-11-19 07:42:36,460 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1482993063] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:42:36,460 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2141088382] [2022-11-19 07:42:36,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:42:36,460 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:42:36,460 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:42:36,461 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:42:36,463 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-19 07:42:36,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:42:36,615 INFO L263 TraceCheckSpWp]: Trace formula consists of 256 conjuncts, 26 conjunts are in the unsatisfiable core [2022-11-19 07:42:36,617 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:42:36,874 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:42:36,875 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:42:37,143 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-19 07:42:37,303 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 4 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:42:37,303 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2141088382] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:42:37,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [11235342] [2022-11-19 07:42:37,305 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-19 07:42:37,305 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:42:37,306 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:42:37,306 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:42:37,306 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:42:37,364 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:42:37,368 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:42:37,369 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:42:37,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:42:37,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:42:37,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:42:37,562 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-19 07:42:37,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-19 07:42:37,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:42:37,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:42:37,739 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:42:37,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:42:37,930 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:42:37,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:42:38,965 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:42:38,967 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:42:38,972 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:42:39,125 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-19 07:42:39,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1032 treesize of output 1029 [2022-11-19 07:42:39,992 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:42:40,014 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:42:40,021 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:42:40,091 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:42:40,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:42:40,261 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:42:40,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:42:40,363 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:42:40,384 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:42:47,517 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10785#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrncat_#t~mem6#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post5#1.base|) |ULTIMATE.start_cstrncat_#t~post5#1.offset|)) (<= (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:42:47,517 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:42:47,517 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:42:47,517 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 11, 11] total 26 [2022-11-19 07:42:47,517 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [724750374] [2022-11-19 07:42:47,517 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:42:47,518 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-19 07:42:47,518 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:42:47,518 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-19 07:42:47,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=1619, Unknown=0, NotChecked=0, Total=1806 [2022-11-19 07:42:47,518 INFO L87 Difference]: Start difference. First operand 230 states and 270 transitions. Second operand has 27 states, 26 states have (on average 2.8076923076923075) internal successors, (73), 27 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:42:48,794 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:42:48,794 INFO L93 Difference]: Finished difference Result 258 states and 295 transitions. [2022-11-19 07:42:48,795 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-19 07:42:48,795 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 2.8076923076923075) internal successors, (73), 27 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-11-19 07:42:48,795 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:42:48,797 INFO L225 Difference]: With dead ends: 258 [2022-11-19 07:42:48,797 INFO L226 Difference]: Without dead ends: 258 [2022-11-19 07:42:48,797 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 61 SyntacticMatches, 1 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 964 ImplicationChecksByTransitivity, 8.6s TimeCoverageRelationStatistics Valid=709, Invalid=3581, Unknown=0, NotChecked=0, Total=4290 [2022-11-19 07:42:48,798 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 587 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 375 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 587 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 401 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 375 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 07:42:48,798 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [587 Valid, 58 Invalid, 401 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 375 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-19 07:42:48,800 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 258 states. [2022-11-19 07:42:48,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 258 to 217. [2022-11-19 07:42:48,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 217 states, 213 states have (on average 1.2018779342723005) internal successors, (256), 216 states have internal predecessors, (256), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:42:48,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 217 states to 217 states and 256 transitions. [2022-11-19 07:42:48,806 INFO L78 Accepts]: Start accepts. Automaton has 217 states and 256 transitions. Word has length 32 [2022-11-19 07:42:48,806 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:42:48,806 INFO L495 AbstractCegarLoop]: Abstraction has 217 states and 256 transitions. [2022-11-19 07:42:48,807 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 2.8076923076923075) internal successors, (73), 27 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:42:48,807 INFO L276 IsEmpty]: Start isEmpty. Operand 217 states and 256 transitions. [2022-11-19 07:42:48,808 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-19 07:42:48,808 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:42:48,808 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:42:48,814 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-19 07:42:49,014 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable34,25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:42:49,014 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:42:49,015 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:42:49,015 INFO L85 PathProgramCache]: Analyzing trace with hash 421092040, now seen corresponding path program 2 times [2022-11-19 07:42:49,015 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:42:49,015 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [122257972] [2022-11-19 07:42:49,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:42:49,015 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:42:49,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:42:49,793 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 0 proven. 20 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:42:49,794 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:42:49,794 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [122257972] [2022-11-19 07:42:49,794 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [122257972] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:42:49,794 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [320728972] [2022-11-19 07:42:49,794 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:42:49,794 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:42:49,795 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:42:49,796 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:42:49,828 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-19 07:42:50,123 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-19 07:42:50,124 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:42:50,126 INFO L263 TraceCheckSpWp]: Trace formula consists of 215 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-19 07:42:50,129 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:42:50,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:42:50,178 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-19 07:42:50,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-19 07:42:51,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 28 [2022-11-19 07:42:53,031 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:42:53,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 30 treesize of output 27 [2022-11-19 07:42:53,362 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 3 proven. 9 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-19 07:42:53,362 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:42:54,527 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:42:54,528 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-19 07:42:54,538 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:42:54,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-19 07:42:55,329 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:42:55,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:42:55,446 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 2 proven. 10 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-19 07:42:55,446 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [320728972] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:42:55,447 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1437102139] [2022-11-19 07:42:55,448 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:42:55,448 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:42:55,449 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:42:55,449 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:42:55,449 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:42:55,500 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:42:55,503 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:42:55,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:42:55,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:42:55,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:42:55,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:42:55,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-19 07:42:55,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:42:55,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:42:55,863 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:42:55,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:42:56,059 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:42:56,060 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:42:56,827 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:42:56,843 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:42:56,926 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:42:56,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:42:57,073 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-19 07:42:57,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-19 07:42:57,263 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:42:57,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:42:57,403 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:42:57,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:42:57,595 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:42:57,609 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:43:06,152 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11556#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.base_85| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_84| Int)) (and (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_84|) (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_84| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_85|)) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_85|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_84|)) (= (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_85|) 1) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_85|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_84|) 0)) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_85|))) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:43:06,152 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:43:06,152 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:43:06,152 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 15, 16] total 47 [2022-11-19 07:43:06,153 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1580150990] [2022-11-19 07:43:06,153 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:43:06,153 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-19 07:43:06,153 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:43:06,154 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-19 07:43:06,154 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=303, Invalid=3724, Unknown=5, NotChecked=0, Total=4032 [2022-11-19 07:43:06,155 INFO L87 Difference]: Start difference. First operand 217 states and 256 transitions. Second operand has 48 states, 47 states have (on average 1.872340425531915) internal successors, (88), 48 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:43:12,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:43:12,036 INFO L93 Difference]: Finished difference Result 261 states and 303 transitions. [2022-11-19 07:43:12,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2022-11-19 07:43:12,037 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 47 states have (on average 1.872340425531915) internal successors, (88), 48 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-11-19 07:43:12,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:43:12,039 INFO L225 Difference]: With dead ends: 261 [2022-11-19 07:43:12,039 INFO L226 Difference]: Without dead ends: 260 [2022-11-19 07:43:12,040 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 52 SyntacticMatches, 1 SemanticMatches, 88 ConstructedPredicates, 0 IntricatePredicates, 2 DeprecatedPredicates, 1538 ImplicationChecksByTransitivity, 18.0s TimeCoverageRelationStatistics Valid=659, Invalid=7346, Unknown=5, NotChecked=0, Total=8010 [2022-11-19 07:43:12,041 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 104 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 536 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 787 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 536 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 235 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-19 07:43:12,041 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 131 Invalid, 787 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 536 Invalid, 0 Unknown, 235 Unchecked, 0.6s Time] [2022-11-19 07:43:12,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 260 states. [2022-11-19 07:43:12,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 260 to 244. [2022-11-19 07:43:12,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 244 states, 240 states have (on average 1.1875) internal successors, (285), 243 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:43:12,048 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 285 transitions. [2022-11-19 07:43:12,048 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 285 transitions. Word has length 32 [2022-11-19 07:43:12,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:43:12,049 INFO L495 AbstractCegarLoop]: Abstraction has 244 states and 285 transitions. [2022-11-19 07:43:12,049 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 47 states have (on average 1.872340425531915) internal successors, (88), 48 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:43:12,049 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 285 transitions. [2022-11-19 07:43:12,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-19 07:43:12,050 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:43:12,050 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:43:12,059 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-19 07:43:12,258 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-19 07:43:12,258 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:43:12,258 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:43:12,258 INFO L85 PathProgramCache]: Analyzing trace with hash 942563987, now seen corresponding path program 1 times [2022-11-19 07:43:12,259 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:43:12,259 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1540042298] [2022-11-19 07:43:12,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:43:12,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:43:12,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:43:12,676 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 8 proven. 13 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-19 07:43:12,676 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:43:12,677 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1540042298] [2022-11-19 07:43:12,677 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1540042298] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:43:12,677 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1655050399] [2022-11-19 07:43:12,677 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:43:12,677 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:43:12,677 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:43:12,679 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:43:12,694 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-19 07:43:12,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:43:12,917 INFO L263 TraceCheckSpWp]: Trace formula consists of 267 conjuncts, 44 conjunts are in the unsatisfiable core [2022-11-19 07:43:12,919 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:43:12,933 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:43:12,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-19 07:43:12,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:43:13,513 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 0 proven. 22 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:43:13,513 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:43:14,199 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 0 proven. 22 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:43:14,199 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1655050399] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:43:14,199 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [522231506] [2022-11-19 07:43:14,201 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-19 07:43:14,201 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:43:14,201 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:43:14,202 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:43:14,202 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:43:14,270 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:43:14,276 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:43:14,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:43:14,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:43:14,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:43:14,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:43:14,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-19 07:43:14,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:43:14,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:43:14,662 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:43:14,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:43:14,908 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:43:14,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:43:15,826 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:43:15,855 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:43:15,938 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:43:15,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:43:16,110 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-19 07:43:16,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-19 07:43:16,299 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:43:16,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:43:16,471 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:43:16,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:43:16,613 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:43:16,627 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:43:23,403 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12368#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrncat_#t~mem6#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post5#1.base|) |ULTIMATE.start_cstrncat_#t~post5#1.offset|)) (<= (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:43:23,403 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:43:23,403 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:43:23,404 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 13, 13] total 36 [2022-11-19 07:43:23,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [184227919] [2022-11-19 07:43:23,404 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:43:23,404 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-19 07:43:23,404 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:43:23,405 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-19 07:43:23,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=200, Invalid=2350, Unknown=0, NotChecked=0, Total=2550 [2022-11-19 07:43:23,405 INFO L87 Difference]: Start difference. First operand 244 states and 285 transitions. Second operand has 36 states, 36 states have (on average 2.611111111111111) internal successors, (94), 36 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:43:26,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:43:26,064 INFO L93 Difference]: Finished difference Result 395 states and 452 transitions. [2022-11-19 07:43:26,065 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-19 07:43:26,065 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.611111111111111) internal successors, (94), 36 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-19 07:43:26,067 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:43:26,069 INFO L225 Difference]: With dead ends: 395 [2022-11-19 07:43:26,069 INFO L226 Difference]: Without dead ends: 366 [2022-11-19 07:43:26,070 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1561 ImplicationChecksByTransitivity, 9.7s TimeCoverageRelationStatistics Valid=803, Invalid=5839, Unknown=0, NotChecked=0, Total=6642 [2022-11-19 07:43:26,071 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 682 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 775 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 682 SdHoareTripleChecker+Valid, 159 SdHoareTripleChecker+Invalid, 822 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 775 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-19 07:43:26,071 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [682 Valid, 159 Invalid, 822 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 775 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-19 07:43:26,072 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 366 states. [2022-11-19 07:43:26,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 366 to 219. [2022-11-19 07:43:26,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 219 states, 215 states have (on average 1.2093023255813953) internal successors, (260), 218 states have internal predecessors, (260), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:43:26,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 219 states to 219 states and 260 transitions. [2022-11-19 07:43:26,078 INFO L78 Accepts]: Start accepts. Automaton has 219 states and 260 transitions. Word has length 34 [2022-11-19 07:43:26,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:43:26,079 INFO L495 AbstractCegarLoop]: Abstraction has 219 states and 260 transitions. [2022-11-19 07:43:26,079 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.611111111111111) internal successors, (94), 36 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:43:26,079 INFO L276 IsEmpty]: Start isEmpty. Operand 219 states and 260 transitions. [2022-11-19 07:43:26,080 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-19 07:43:26,080 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:43:26,080 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:43:26,092 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-19 07:43:26,287 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-19 07:43:26,287 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:43:26,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:43:26,288 INFO L85 PathProgramCache]: Analyzing trace with hash -1371896404, now seen corresponding path program 7 times [2022-11-19 07:43:26,288 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:43:26,288 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [598338877] [2022-11-19 07:43:26,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:43:26,288 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:43:26,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:43:27,378 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 25 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:43:27,379 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:43:27,379 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [598338877] [2022-11-19 07:43:27,379 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [598338877] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:43:27,379 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1037737049] [2022-11-19 07:43:27,379 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-19 07:43:27,379 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:43:27,380 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:43:27,387 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:43:27,406 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-19 07:43:27,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:43:27,564 INFO L263 TraceCheckSpWp]: Trace formula consists of 273 conjuncts, 80 conjunts are in the unsatisfiable core [2022-11-19 07:43:27,566 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:43:27,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:43:27,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:43:27,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-19 07:43:30,135 INFO L321 Elim1Store]: treesize reduction 24, result has 73.6 percent of original size [2022-11-19 07:43:30,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 21 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 7 case distinctions, treesize of input 81 treesize of output 97 [2022-11-19 07:43:30,146 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-19 07:43:30,159 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-19 07:43:30,263 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 36 proven. 13 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-11-19 07:43:30,263 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:43:32,230 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:43:32,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 181 treesize of output 97 [2022-11-19 07:43:32,240 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-19 07:43:32,306 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:43:32,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 21 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 186 treesize of output 227 [2022-11-19 07:43:32,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 7 select indices, 7 select index equivalence classes, 21 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 0 case distinctions, treesize of input 76 treesize of output 50 [2022-11-19 07:43:32,467 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-19 07:43:32,479 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-19 07:43:32,862 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 0 proven. 49 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-11-19 07:43:32,862 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1037737049] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:43:32,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [830510337] [2022-11-19 07:43:32,863 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-19 07:43:32,864 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:43:32,864 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:43:32,864 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:43:32,864 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:43:32,907 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:43:32,911 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:43:32,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:43:32,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:43:33,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:43:33,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:43:33,098 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-19 07:43:33,098 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-19 07:43:33,432 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:43:37,936 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13326#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-19 07:43:37,937 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:43:37,937 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:43:37,937 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 19, 19] total 56 [2022-11-19 07:43:37,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1367146842] [2022-11-19 07:43:37,937 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:43:37,937 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-11-19 07:43:37,938 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:43:37,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-11-19 07:43:37,939 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=437, Invalid=3985, Unknown=0, NotChecked=0, Total=4422 [2022-11-19 07:43:37,939 INFO L87 Difference]: Start difference. First operand 219 states and 260 transitions. Second operand has 57 states, 56 states have (on average 1.4464285714285714) internal successors, (81), 57 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:43:47,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:43:47,755 INFO L93 Difference]: Finished difference Result 225 states and 265 transitions. [2022-11-19 07:43:47,755 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-19 07:43:47,756 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 56 states have (on average 1.4464285714285714) internal successors, (81), 57 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-19 07:43:47,756 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:43:47,757 INFO L225 Difference]: With dead ends: 225 [2022-11-19 07:43:47,757 INFO L226 Difference]: Without dead ends: 206 [2022-11-19 07:43:47,758 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2288 ImplicationChecksByTransitivity, 17.6s TimeCoverageRelationStatistics Valid=1038, Invalid=8661, Unknown=3, NotChecked=0, Total=9702 [2022-11-19 07:43:47,758 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 52 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 791 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 897 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 791 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 104 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-19 07:43:47,758 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 89 Invalid, 897 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 791 Invalid, 0 Unknown, 104 Unchecked, 0.8s Time] [2022-11-19 07:43:47,759 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 206 states. [2022-11-19 07:43:47,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 206 to 198. [2022-11-19 07:43:47,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 195 states have (on average 1.205128205128205) internal successors, (235), 197 states have internal predecessors, (235), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:43:47,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 235 transitions. [2022-11-19 07:43:47,763 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 235 transitions. Word has length 36 [2022-11-19 07:43:47,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:43:47,763 INFO L495 AbstractCegarLoop]: Abstraction has 198 states and 235 transitions. [2022-11-19 07:43:47,763 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 56 states have (on average 1.4464285714285714) internal successors, (81), 57 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:43:47,764 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 235 transitions. [2022-11-19 07:43:47,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-19 07:43:47,764 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:43:47,764 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:43:47,775 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-19 07:43:47,970 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable37,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:43:47,971 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:43:47,971 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:43:47,971 INFO L85 PathProgramCache]: Analyzing trace with hash 1297057216, now seen corresponding path program 3 times [2022-11-19 07:43:47,971 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:43:47,971 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [908718250] [2022-11-19 07:43:47,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:43:47,971 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:43:48,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:43:48,435 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 18 proven. 21 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-19 07:43:48,436 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:43:48,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [908718250] [2022-11-19 07:43:48,436 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [908718250] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:43:48,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1690147631] [2022-11-19 07:43:48,436 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-19 07:43:48,436 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:43:48,436 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:43:48,437 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:43:48,440 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-19 07:43:48,609 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-19 07:43:48,609 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:43:48,612 INFO L263 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-19 07:43:48,613 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:43:48,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-19 07:43:49,188 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-19 07:43:49,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 32 treesize of output 42 [2022-11-19 07:43:49,205 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:43:49,206 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:43:49,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 10 [2022-11-19 07:43:49,490 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-11-19 07:43:49,662 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:43:49,665 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:43:49,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-11-19 07:43:49,713 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 17 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-19 07:43:49,713 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:43:49,808 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1100 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1100) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) 0)) is different from false [2022-11-19 07:43:50,480 INFO L321 Elim1Store]: treesize reduction 16, result has 66.7 percent of original size [2022-11-19 07:43:50,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 71 treesize of output 87 [2022-11-19 07:43:50,495 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:43:50,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 51 [2022-11-19 07:43:50,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:43:50,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2022-11-19 07:43:50,571 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:43:50,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 45 treesize of output 55 [2022-11-19 07:43:51,060 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 12 proven. 9 refuted. 0 times theorem prover too weak. 16 trivial. 4 not checked. [2022-11-19 07:43:51,061 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1690147631] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:43:51,061 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2046301183] [2022-11-19 07:43:51,062 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-19 07:43:51,062 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:43:51,062 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:43:51,062 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:43:51,062 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:43:51,093 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:43:51,096 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:43:51,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:43:51,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:43:51,178 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:43:51,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:43:51,258 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-19 07:43:51,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-19 07:43:51,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:43:51,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:43:51,426 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:43:51,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:43:51,621 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:43:51,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:43:52,590 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:43:52,592 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:43:52,597 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:43:52,702 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-19 07:43:52,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1022 treesize of output 1029 [2022-11-19 07:43:53,356 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:43:53,373 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:43:53,386 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:43:53,458 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:43:53,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:43:53,588 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:43:53,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:43:53,683 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:43:53,699 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:44:02,059 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14094#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:44:02,059 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:44:02,059 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:44:02,059 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 20, 19] total 49 [2022-11-19 07:44:02,060 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1862922773] [2022-11-19 07:44:02,060 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:44:02,060 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-19 07:44:02,060 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:44:02,061 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-19 07:44:02,062 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=288, Invalid=3724, Unknown=24, NotChecked=124, Total=4160 [2022-11-19 07:44:02,062 INFO L87 Difference]: Start difference. First operand 198 states and 235 transitions. Second operand has 49 states, 49 states have (on average 1.8775510204081634) internal successors, (92), 49 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:04,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:44:04,783 INFO L93 Difference]: Finished difference Result 286 states and 329 transitions. [2022-11-19 07:44:04,783 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-11-19 07:44:04,784 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 1.8775510204081634) internal successors, (92), 49 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-19 07:44:04,784 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:44:04,785 INFO L225 Difference]: With dead ends: 286 [2022-11-19 07:44:04,785 INFO L226 Difference]: Without dead ends: 238 [2022-11-19 07:44:04,786 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 63 SyntacticMatches, 1 SemanticMatches, 99 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 2657 ImplicationChecksByTransitivity, 12.6s TimeCoverageRelationStatistics Valid=694, Invalid=9181, Unknown=29, NotChecked=196, Total=10100 [2022-11-19 07:44:04,787 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 136 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 267 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 82 SdHoareTripleChecker+Invalid, 530 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 267 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 248 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 07:44:04,787 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 82 Invalid, 530 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 267 Invalid, 0 Unknown, 248 Unchecked, 0.3s Time] [2022-11-19 07:44:04,788 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 238 states. [2022-11-19 07:44:04,791 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 238 to 221. [2022-11-19 07:44:04,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 218 states have (on average 1.1972477064220184) internal successors, (261), 220 states have internal predecessors, (261), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:04,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 261 transitions. [2022-11-19 07:44:04,793 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 261 transitions. Word has length 38 [2022-11-19 07:44:04,793 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:44:04,793 INFO L495 AbstractCegarLoop]: Abstraction has 221 states and 261 transitions. [2022-11-19 07:44:04,793 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 1.8775510204081634) internal successors, (92), 49 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:04,794 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 261 transitions. [2022-11-19 07:44:04,794 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-19 07:44:04,794 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:44:04,795 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:44:04,803 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-19 07:44:05,002 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-19 07:44:05,002 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:44:05,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:44:05,002 INFO L85 PathProgramCache]: Analyzing trace with hash 565573687, now seen corresponding path program 3 times [2022-11-19 07:44:05,002 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:44:05,003 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [730042745] [2022-11-19 07:44:05,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:44:05,003 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:44:05,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:44:06,273 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 14 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:44:06,274 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:44:06,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [730042745] [2022-11-19 07:44:06,274 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [730042745] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:44:06,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [162848466] [2022-11-19 07:44:06,274 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-19 07:44:06,274 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:44:06,274 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:44:06,275 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:44:06,278 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-19 07:44:06,596 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-19 07:44:06,596 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:44:06,599 INFO L263 TraceCheckSpWp]: Trace formula consists of 289 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-19 07:44:06,602 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:44:06,616 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:44:07,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:44:07,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-19 07:44:07,574 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:44:07,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 17 [2022-11-19 07:44:07,747 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 2 proven. 35 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:44:07,747 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:44:08,287 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:44:08,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-19 07:44:08,295 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:44:08,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-19 07:44:09,166 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:44:09,218 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 10 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:44:09,218 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [162848466] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:44:09,218 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1312131934] [2022-11-19 07:44:09,220 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:44:09,220 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:44:09,220 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:44:09,220 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:44:09,221 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:44:09,266 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:44:09,272 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:44:09,273 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:44:09,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:09,370 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:09,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:44:09,469 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-19 07:44:09,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-19 07:44:09,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:09,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:09,671 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:44:09,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:44:09,864 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:44:09,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:44:10,613 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:10,623 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:10,714 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:44:10,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:44:10,855 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-19 07:44:10,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-19 07:44:11,041 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:44:11,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:44:11,179 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:44:11,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:44:11,376 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:11,389 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:44:19,187 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14965#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_115| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.base_116| Int)) (and (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_115| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_116|)) (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_116|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_115|) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (= (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_116|) 1) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_116|) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_115|) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_116|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_115|) 0)))) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:44:19,187 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:44:19,187 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:44:19,187 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 52 [2022-11-19 07:44:19,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [215556849] [2022-11-19 07:44:19,187 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:44:19,189 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-11-19 07:44:19,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:44:19,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-11-19 07:44:19,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=402, Invalid=4289, Unknown=1, NotChecked=0, Total=4692 [2022-11-19 07:44:19,190 INFO L87 Difference]: Start difference. First operand 221 states and 261 transitions. Second operand has 53 states, 53 states have (on average 2.0) internal successors, (106), 52 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:20,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:44:20,962 INFO L93 Difference]: Finished difference Result 231 states and 271 transitions. [2022-11-19 07:44:20,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-19 07:44:20,963 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 53 states have (on average 2.0) internal successors, (106), 52 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-19 07:44:20,963 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:44:20,964 INFO L225 Difference]: With dead ends: 231 [2022-11-19 07:44:20,964 INFO L226 Difference]: Without dead ends: 224 [2022-11-19 07:44:20,965 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 62 SyntacticMatches, 1 SemanticMatches, 81 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2143 ImplicationChecksByTransitivity, 11.4s TimeCoverageRelationStatistics Valid=624, Invalid=6181, Unknown=1, NotChecked=0, Total=6806 [2022-11-19 07:44:20,965 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 89 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 454 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 588 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 454 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 115 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 07:44:20,966 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [89 Valid, 215 Invalid, 588 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 454 Invalid, 0 Unknown, 115 Unchecked, 0.4s Time] [2022-11-19 07:44:20,966 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 224 states. [2022-11-19 07:44:20,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 224 to 223. [2022-11-19 07:44:20,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 223 states, 220 states have (on average 1.1954545454545455) internal successors, (263), 222 states have internal predecessors, (263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:20,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223 states to 223 states and 263 transitions. [2022-11-19 07:44:20,987 INFO L78 Accepts]: Start accepts. Automaton has 223 states and 263 transitions. Word has length 38 [2022-11-19 07:44:20,987 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:44:20,987 INFO L495 AbstractCegarLoop]: Abstraction has 223 states and 263 transitions. [2022-11-19 07:44:20,988 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 53 states have (on average 2.0) internal successors, (106), 52 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:20,988 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 263 transitions. [2022-11-19 07:44:20,988 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-19 07:44:20,989 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:44:20,989 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:44:20,999 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-19 07:44:21,196 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-19 07:44:21,197 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:44:21,197 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:44:21,197 INFO L85 PathProgramCache]: Analyzing trace with hash 1390763572, now seen corresponding path program 4 times [2022-11-19 07:44:21,197 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:44:21,197 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [579466157] [2022-11-19 07:44:21,197 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:44:21,197 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:44:21,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:44:22,038 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 9 proven. 33 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:44:22,039 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:44:22,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [579466157] [2022-11-19 07:44:22,039 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [579466157] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:44:22,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [891130423] [2022-11-19 07:44:22,039 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-19 07:44:22,039 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:44:22,039 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:44:22,040 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:44:22,043 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-19 07:44:22,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:44:22,233 INFO L263 TraceCheckSpWp]: Trace formula consists of 302 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-19 07:44:22,236 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:44:22,284 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:44:22,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-19 07:44:22,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:44:23,136 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 16 proven. 26 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:44:23,136 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:44:24,040 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:44:24,096 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 25 proven. 17 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:44:24,096 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [891130423] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:44:24,096 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [176835283] [2022-11-19 07:44:24,097 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:44:24,097 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:44:24,098 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:44:24,098 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:44:24,098 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:44:24,138 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:44:24,144 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:44:24,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:44:24,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:44:24,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:24,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:24,301 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-19 07:44:24,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:24,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:24,467 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:44:24,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:44:24,669 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:44:24,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:44:25,397 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:25,408 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:25,502 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:44:25,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:44:25,641 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-19 07:44:25,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-19 07:44:25,823 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:44:25,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:44:25,973 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:44:25,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:44:26,155 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:26,170 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:44:33,589 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15744#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.base_125| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_124| Int)) (and (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_125|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_124|)) (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_124| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_125|)) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_125|) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_124|) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_125|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_124|) 0)) (= (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_125|) 1))) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:44:33,589 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:44:33,590 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:44:33,590 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 15, 15] total 46 [2022-11-19 07:44:33,590 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [819304838] [2022-11-19 07:44:33,590 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:44:33,590 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-11-19 07:44:33,590 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:44:33,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-11-19 07:44:33,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=311, Invalid=3595, Unknown=0, NotChecked=0, Total=3906 [2022-11-19 07:44:33,592 INFO L87 Difference]: Start difference. First operand 223 states and 263 transitions. Second operand has 47 states, 46 states have (on average 2.4782608695652173) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:35,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:44:35,579 INFO L93 Difference]: Finished difference Result 335 states and 378 transitions. [2022-11-19 07:44:35,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-19 07:44:35,580 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 46 states have (on average 2.4782608695652173) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-19 07:44:35,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:44:35,581 INFO L225 Difference]: With dead ends: 335 [2022-11-19 07:44:35,582 INFO L226 Difference]: Without dead ends: 333 [2022-11-19 07:44:35,583 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 73 SyntacticMatches, 1 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1511 ImplicationChecksByTransitivity, 10.4s TimeCoverageRelationStatistics Valid=740, Invalid=5266, Unknown=0, NotChecked=0, Total=6006 [2022-11-19 07:44:35,583 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 534 mSDsluCounter, 222 mSDsCounter, 0 mSdLazyCounter, 744 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 534 SdHoareTripleChecker+Valid, 247 SdHoareTripleChecker+Invalid, 778 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 744 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-19 07:44:35,583 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [534 Valid, 247 Invalid, 778 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 744 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-19 07:44:35,584 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2022-11-19 07:44:35,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 226. [2022-11-19 07:44:35,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 226 states, 223 states have (on average 1.1748878923766817) internal successors, (262), 225 states have internal predecessors, (262), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:35,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 226 states to 226 states and 262 transitions. [2022-11-19 07:44:35,589 INFO L78 Accepts]: Start accepts. Automaton has 226 states and 262 transitions. Word has length 40 [2022-11-19 07:44:35,590 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:44:35,590 INFO L495 AbstractCegarLoop]: Abstraction has 226 states and 262 transitions. [2022-11-19 07:44:35,590 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 46 states have (on average 2.4782608695652173) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:35,590 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 262 transitions. [2022-11-19 07:44:35,591 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-19 07:44:35,591 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:44:35,591 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:44:35,597 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-19 07:44:35,791 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:44:35,791 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:44:35,792 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:44:35,792 INFO L85 PathProgramCache]: Analyzing trace with hash 261409081, now seen corresponding path program 1 times [2022-11-19 07:44:35,792 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:44:35,792 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [751993062] [2022-11-19 07:44:35,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:44:35,792 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:44:35,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:44:36,291 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 18 proven. 21 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:44:36,291 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:44:36,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [751993062] [2022-11-19 07:44:36,291 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [751993062] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:44:36,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1312042506] [2022-11-19 07:44:36,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:44:36,292 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:44:36,292 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:44:36,293 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:44:36,315 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-19 07:44:36,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:44:36,525 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 71 conjunts are in the unsatisfiable core [2022-11-19 07:44:36,527 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:44:36,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:37,134 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-19 07:44:37,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 23 [2022-11-19 07:44:37,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 3 [2022-11-19 07:44:37,462 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-19 07:44:37,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 34 [2022-11-19 07:44:37,694 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:44:37,695 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 31 treesize of output 26 [2022-11-19 07:44:37,952 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 2 proven. 25 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-19 07:44:37,952 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:44:38,140 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:44:38,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 24 [2022-11-19 07:44:39,656 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:44:39,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-19 07:44:39,665 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:44:39,674 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-19 07:44:39,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 11 [2022-11-19 07:44:40,094 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-19 07:44:40,094 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1312042506] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:44:40,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [56820594] [2022-11-19 07:44:40,096 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-19 07:44:40,096 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:44:40,096 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:44:40,096 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:44:40,097 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:44:40,141 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:44:40,145 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:44:40,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:44:40,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:44:40,235 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:40,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:44:40,335 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-19 07:44:40,335 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-19 07:44:40,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:40,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:40,529 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:44:40,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:44:40,725 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:44:40,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:44:41,537 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:41,544 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:41,632 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:44:41,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:44:41,788 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-19 07:44:41,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-19 07:44:42,022 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:44:42,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:44:42,206 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:44:42,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:44:42,348 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:42,363 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:44:50,094 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16642#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:44:50,094 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:44:50,094 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:44:50,094 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 22, 23] total 57 [2022-11-19 07:44:50,094 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1058721683] [2022-11-19 07:44:50,095 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:44:50,095 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-11-19 07:44:50,095 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:44:50,096 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-11-19 07:44:50,096 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=276, Invalid=4834, Unknown=2, NotChecked=0, Total=5112 [2022-11-19 07:44:50,097 INFO L87 Difference]: Start difference. First operand 226 states and 262 transitions. Second operand has 57 states, 57 states have (on average 1.7894736842105263) internal successors, (102), 57 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:53,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:44:53,240 INFO L93 Difference]: Finished difference Result 406 states and 454 transitions. [2022-11-19 07:44:53,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2022-11-19 07:44:53,243 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 57 states have (on average 1.7894736842105263) internal successors, (102), 57 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-19 07:44:53,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:44:53,245 INFO L225 Difference]: With dead ends: 406 [2022-11-19 07:44:53,245 INFO L226 Difference]: Without dead ends: 340 [2022-11-19 07:44:53,247 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 64 SyntacticMatches, 1 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3529 ImplicationChecksByTransitivity, 13.0s TimeCoverageRelationStatistics Valid=680, Invalid=11308, Unknown=2, NotChecked=0, Total=11990 [2022-11-19 07:44:53,248 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 204 mSDsluCounter, 466 mSDsCounter, 0 mSdLazyCounter, 644 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 204 SdHoareTripleChecker+Valid, 486 SdHoareTripleChecker+Invalid, 1261 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 644 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 604 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-19 07:44:53,248 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [204 Valid, 486 Invalid, 1261 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 644 Invalid, 0 Unknown, 604 Unchecked, 0.6s Time] [2022-11-19 07:44:53,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 340 states. [2022-11-19 07:44:53,281 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 340 to 266. [2022-11-19 07:44:53,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 263 states have (on average 1.1901140684410647) internal successors, (313), 265 states have internal predecessors, (313), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:53,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 313 transitions. [2022-11-19 07:44:53,283 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 313 transitions. Word has length 40 [2022-11-19 07:44:53,283 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:44:53,284 INFO L495 AbstractCegarLoop]: Abstraction has 266 states and 313 transitions. [2022-11-19 07:44:53,284 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 57 states have (on average 1.7894736842105263) internal successors, (102), 57 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:44:53,284 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 313 transitions. [2022-11-19 07:44:53,285 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-19 07:44:53,285 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:44:53,285 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:44:53,301 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-19 07:44:53,492 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable41 [2022-11-19 07:44:53,492 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:44:53,492 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:44:53,492 INFO L85 PathProgramCache]: Analyzing trace with hash 90453936, now seen corresponding path program 4 times [2022-11-19 07:44:53,493 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:44:53,493 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [161935875] [2022-11-19 07:44:53,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:44:53,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:44:53,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:44:53,968 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 1 proven. 29 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-19 07:44:53,969 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:44:53,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [161935875] [2022-11-19 07:44:53,969 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [161935875] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:44:53,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [241849003] [2022-11-19 07:44:53,969 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-19 07:44:53,969 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:44:53,969 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:44:53,971 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:44:53,991 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-19 07:44:54,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:44:54,172 INFO L263 TraceCheckSpWp]: Trace formula consists of 321 conjuncts, 45 conjunts are in the unsatisfiable core [2022-11-19 07:44:54,174 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:44:54,448 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 4 proven. 26 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-19 07:44:54,449 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:44:54,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-19 07:44:54,871 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 4 proven. 26 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-19 07:44:54,871 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [241849003] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:44:54,871 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1954331185] [2022-11-19 07:44:54,872 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-19 07:44:54,872 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:44:54,872 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:44:54,873 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:44:54,873 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:44:54,922 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:44:54,925 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:44:54,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:44:54,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:44:55,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:55,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:55,082 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-19 07:44:55,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:55,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:44:55,244 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:44:55,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:44:55,408 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:44:55,408 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:44:56,401 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:44:56,403 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:44:56,407 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:44:56,502 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-19 07:44:56,503 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1026 treesize of output 1019 [2022-11-19 07:44:56,794 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:56,799 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:56,816 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:56,824 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:57,738 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:57,790 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:44:57,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:44:57,938 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:44:57,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:44:58,056 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:44:58,075 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:45:04,694 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17682#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-19 07:45:04,694 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:45:04,695 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:45:04,695 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 27 [2022-11-19 07:45:04,695 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1068896500] [2022-11-19 07:45:04,695 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:45:04,695 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-19 07:45:04,695 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:45:04,696 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-19 07:45:04,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1695, Unknown=0, NotChecked=0, Total=1892 [2022-11-19 07:45:04,696 INFO L87 Difference]: Start difference. First operand 266 states and 313 transitions. Second operand has 28 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 28 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:45:05,486 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:45:05,487 INFO L93 Difference]: Finished difference Result 358 states and 403 transitions. [2022-11-19 07:45:05,487 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-19 07:45:05,487 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 28 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-19 07:45:05,487 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:45:05,488 INFO L225 Difference]: With dead ends: 358 [2022-11-19 07:45:05,488 INFO L226 Difference]: Without dead ends: 358 [2022-11-19 07:45:05,489 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 91 SyntacticMatches, 4 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 808 ImplicationChecksByTransitivity, 7.6s TimeCoverageRelationStatistics Valid=425, Invalid=2767, Unknown=0, NotChecked=0, Total=3192 [2022-11-19 07:45:05,490 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 384 mSDsluCounter, 129 mSDsCounter, 0 mSdLazyCounter, 472 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 384 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 482 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 472 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 07:45:05,490 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [384 Valid, 146 Invalid, 482 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 472 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 07:45:05,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 358 states. [2022-11-19 07:45:05,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 358 to 228. [2022-11-19 07:45:05,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 228 states, 225 states have (on average 1.1644444444444444) internal successors, (262), 227 states have internal predecessors, (262), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:45:05,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 262 transitions. [2022-11-19 07:45:05,495 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 262 transitions. Word has length 42 [2022-11-19 07:45:05,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:45:05,495 INFO L495 AbstractCegarLoop]: Abstraction has 228 states and 262 transitions. [2022-11-19 07:45:05,495 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 28 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:45:05,495 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 262 transitions. [2022-11-19 07:45:05,495 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-19 07:45:05,496 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:45:05,496 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:45:05,508 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-11-19 07:45:05,707 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-11-19 07:45:05,708 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:45:05,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:45:05,708 INFO L85 PathProgramCache]: Analyzing trace with hash -2031544723, now seen corresponding path program 5 times [2022-11-19 07:45:05,708 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:45:05,708 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1323324718] [2022-11-19 07:45:05,708 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:45:05,708 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:45:05,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:45:08,637 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 15 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:45:08,637 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:45:08,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1323324718] [2022-11-19 07:45:08,638 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1323324718] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:45:08,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2063426694] [2022-11-19 07:45:08,638 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:45:08,638 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:45:08,638 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:45:08,639 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:45:08,641 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-19 07:45:09,110 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-19 07:45:09,110 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:45:09,113 INFO L263 TraceCheckSpWp]: Trace formula consists of 300 conjuncts, 89 conjunts are in the unsatisfiable core [2022-11-19 07:45:09,116 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:45:09,191 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-19 07:45:09,192 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-19 07:45:09,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:45:09,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-19 07:45:10,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 26 [2022-11-19 07:45:10,788 INFO L321 Elim1Store]: treesize reduction 4, result has 90.7 percent of original size [2022-11-19 07:45:10,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 49 [2022-11-19 07:45:11,593 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 10 proven. 28 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-19 07:45:11,594 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:45:13,521 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:45:13,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 35 [2022-11-19 07:45:13,543 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:45:13,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 57 treesize of output 73 [2022-11-19 07:45:13,560 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:45:13,560 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 23 [2022-11-19 07:45:15,511 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:45:15,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:45:15,648 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-19 07:45:15,648 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2063426694] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:45:15,648 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1845376628] [2022-11-19 07:45:15,649 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:45:15,649 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:45:15,649 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:45:15,649 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:45:15,649 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:45:15,682 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:45:15,685 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:45:15,686 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:45:15,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:45:15,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:45:15,779 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:45:15,835 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-19 07:45:15,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-19 07:45:15,889 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:45:15,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:45:16,002 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:45:16,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:45:16,183 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:45:16,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:45:16,845 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:45:16,860 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:45:16,928 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:45:16,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:45:17,057 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-19 07:45:17,058 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-19 07:45:17,258 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:45:17,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:45:17,397 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:45:17,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:45:17,549 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:45:17,560 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:45:25,257 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18620#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.base_157| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_156| Int)) (and (= (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_157|) 1) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_157|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_156|) 0)) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_157|) (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_157|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_156|) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_156| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_157|)) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_156|))) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:45:25,257 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:45:25,258 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:45:25,258 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 20, 20] total 63 [2022-11-19 07:45:25,258 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [787880754] [2022-11-19 07:45:25,258 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:45:25,258 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 64 states [2022-11-19 07:45:25,258 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:45:25,259 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2022-11-19 07:45:25,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=421, Invalid=5899, Unknown=0, NotChecked=0, Total=6320 [2022-11-19 07:45:25,260 INFO L87 Difference]: Start difference. First operand 228 states and 262 transitions. Second operand has 64 states, 64 states have (on average 1.78125) internal successors, (114), 63 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:45:36,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:45:36,666 INFO L93 Difference]: Finished difference Result 276 states and 314 transitions. [2022-11-19 07:45:36,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 68 states. [2022-11-19 07:45:36,666 INFO L78 Accepts]: Start accepts. Automaton has has 64 states, 64 states have (on average 1.78125) internal successors, (114), 63 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-19 07:45:36,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:45:36,668 INFO L225 Difference]: With dead ends: 276 [2022-11-19 07:45:36,668 INFO L226 Difference]: Without dead ends: 266 [2022-11-19 07:45:36,669 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 203 GetRequests, 71 SyntacticMatches, 0 SemanticMatches, 132 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4569 ImplicationChecksByTransitivity, 23.6s TimeCoverageRelationStatistics Valid=1374, Invalid=16448, Unknown=0, NotChecked=0, Total=17822 [2022-11-19 07:45:36,669 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 188 mSDsluCounter, 220 mSDsCounter, 0 mSdLazyCounter, 899 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 188 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 1116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 899 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 179 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:45:36,669 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [188 Valid, 229 Invalid, 1116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 899 Invalid, 0 Unknown, 179 Unchecked, 1.1s Time] [2022-11-19 07:45:36,670 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 266 states. [2022-11-19 07:45:36,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 266 to 261. [2022-11-19 07:45:36,673 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 258 states have (on average 1.1627906976744187) internal successors, (300), 260 states have internal predecessors, (300), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:45:36,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 300 transitions. [2022-11-19 07:45:36,674 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 300 transitions. Word has length 42 [2022-11-19 07:45:36,674 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:45:36,674 INFO L495 AbstractCegarLoop]: Abstraction has 261 states and 300 transitions. [2022-11-19 07:45:36,674 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 64 states, 64 states have (on average 1.78125) internal successors, (114), 63 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:45:36,675 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 300 transitions. [2022-11-19 07:45:36,675 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-19 07:45:36,675 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:45:36,676 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:45:36,687 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-19 07:45:36,882 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-11-19 07:45:36,882 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:45:36,883 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:45:36,883 INFO L85 PathProgramCache]: Analyzing trace with hash -522356581, now seen corresponding path program 3 times [2022-11-19 07:45:36,883 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:45:36,883 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [77897292] [2022-11-19 07:45:36,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:45:36,883 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:45:36,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:45:37,867 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 25 proven. 66 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:45:37,868 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:45:37,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [77897292] [2022-11-19 07:45:37,868 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [77897292] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:45:37,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [757386970] [2022-11-19 07:45:37,868 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-19 07:45:37,868 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:45:37,868 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:45:37,869 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:45:37,887 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-19 07:45:38,141 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-19 07:45:38,141 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:45:38,145 INFO L263 TraceCheckSpWp]: Trace formula consists of 316 conjuncts, 65 conjunts are in the unsatisfiable core [2022-11-19 07:45:38,147 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:45:38,154 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:45:38,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-19 07:45:38,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:45:39,595 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 42 proven. 49 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:45:39,595 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:45:41,005 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 30 proven. 61 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:45:41,005 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [757386970] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:45:41,005 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [420712236] [2022-11-19 07:45:41,006 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:45:41,006 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:45:41,007 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:45:41,007 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:45:41,007 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:45:41,043 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:45:41,047 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:45:41,048 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:45:41,076 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:45:41,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:45:41,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:45:41,213 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-19 07:45:41,213 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-19 07:45:41,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:45:41,286 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:45:41,380 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:45:41,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:45:41,547 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:45:41,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:45:42,225 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:45:42,243 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:45:42,319 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:45:42,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:45:42,393 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:45:42,404 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:45:48,522 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19597#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:45:48,523 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:45:48,523 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:45:48,523 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 21, 21] total 61 [2022-11-19 07:45:48,523 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [329859424] [2022-11-19 07:45:48,523 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:45:48,523 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-19 07:45:48,524 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:45:48,524 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-19 07:45:48,524 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=501, Invalid=5351, Unknown=0, NotChecked=0, Total=5852 [2022-11-19 07:45:48,524 INFO L87 Difference]: Start difference. First operand 261 states and 300 transitions. Second operand has 62 states, 61 states have (on average 2.081967213114754) internal successors, (127), 62 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:45:51,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:45:51,667 INFO L93 Difference]: Finished difference Result 539 states and 588 transitions. [2022-11-19 07:45:51,667 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-19 07:45:51,667 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 61 states have (on average 2.081967213114754) internal successors, (127), 62 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-19 07:45:51,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:45:51,670 INFO L225 Difference]: With dead ends: 539 [2022-11-19 07:45:51,670 INFO L226 Difference]: Without dead ends: 529 [2022-11-19 07:45:51,671 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 170 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2546 ImplicationChecksByTransitivity, 10.8s TimeCoverageRelationStatistics Valid=1277, Invalid=8425, Unknown=0, NotChecked=0, Total=9702 [2022-11-19 07:45:51,671 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 1081 mSDsluCounter, 506 mSDsCounter, 0 mSdLazyCounter, 1461 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1081 SdHoareTripleChecker+Valid, 542 SdHoareTripleChecker+Invalid, 1500 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 1461 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:45:51,671 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1081 Valid, 542 Invalid, 1500 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 1461 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-19 07:45:51,672 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529 states. [2022-11-19 07:45:51,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529 to 330. [2022-11-19 07:45:51,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 330 states, 327 states have (on average 1.1376146788990826) internal successors, (372), 329 states have internal predecessors, (372), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:45:51,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 330 states to 330 states and 372 transitions. [2022-11-19 07:45:51,677 INFO L78 Accepts]: Start accepts. Automaton has 330 states and 372 transitions. Word has length 43 [2022-11-19 07:45:51,677 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:45:51,677 INFO L495 AbstractCegarLoop]: Abstraction has 330 states and 372 transitions. [2022-11-19 07:45:51,677 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 61 states have (on average 2.081967213114754) internal successors, (127), 62 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:45:51,678 INFO L276 IsEmpty]: Start isEmpty. Operand 330 states and 372 transitions. [2022-11-19 07:45:51,678 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-19 07:45:51,678 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:45:51,678 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:45:51,687 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-19 07:45:51,885 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable44,35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:45:51,885 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:45:51,885 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:45:51,885 INFO L85 PathProgramCache]: Analyzing trace with hash 474543426, now seen corresponding path program 4 times [2022-11-19 07:45:51,885 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:45:51,885 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1194834548] [2022-11-19 07:45:51,886 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:45:51,886 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:45:51,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:45:53,823 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 14 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:45:53,823 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:45:53,823 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1194834548] [2022-11-19 07:45:53,823 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1194834548] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:45:53,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1909450861] [2022-11-19 07:45:53,824 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-19 07:45:53,824 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:45:53,824 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:45:53,825 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:45:53,827 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-19 07:45:54,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:45:54,030 INFO L263 TraceCheckSpWp]: Trace formula consists of 327 conjuncts, 88 conjunts are in the unsatisfiable core [2022-11-19 07:45:54,033 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:45:54,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:45:54,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-19 07:45:55,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-19 07:46:31,114 INFO L321 Elim1Store]: treesize reduction 27, result has 55.7 percent of original size [2022-11-19 07:46:31,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 71 treesize of output 60 [2022-11-19 07:46:31,182 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 15 proven. 57 refuted. 34 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:46:31,182 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:46:47,454 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:46:47,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 157 treesize of output 87 [2022-11-19 07:46:47,488 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:46:47,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 165 treesize of output 179 [2022-11-19 07:46:47,497 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:46:47,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 67 treesize of output 43 [2022-11-19 07:46:50,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:46:50,248 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-19 07:46:50,255 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 45 proven. 61 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:46:50,255 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1909450861] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:46:50,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1298571695] [2022-11-19 07:46:50,256 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:46:50,256 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:46:50,256 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:46:50,257 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:46:50,257 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:46:50,290 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:46:50,294 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:46:50,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:46:50,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:46:50,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:46:50,386 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:46:50,449 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-19 07:46:50,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-19 07:46:50,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:46:50,528 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:46:50,624 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:46:50,625 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:46:50,811 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:46:50,812 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:46:51,464 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:46:51,489 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:46:51,569 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:46:51,570 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:46:51,643 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:46:51,654 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:46:59,929 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20868#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:46:59,929 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:46:59,929 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:46:59,929 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 28, 28] total 78 [2022-11-19 07:46:59,929 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [472750087] [2022-11-19 07:46:59,929 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:46:59,930 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 79 states [2022-11-19 07:46:59,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:46:59,930 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 79 interpolants. [2022-11-19 07:46:59,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=466, Invalid=8206, Unknown=70, NotChecked=0, Total=8742 [2022-11-19 07:46:59,931 INFO L87 Difference]: Start difference. First operand 330 states and 372 transitions. Second operand has 79 states, 79 states have (on average 1.5569620253164558) internal successors, (123), 78 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:47:30,002 WARN L233 SmtUtils]: Spent 24.58s on a formula simplification. DAG size of input: 97 DAG size of output: 72 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:47:59,827 WARN L233 SmtUtils]: Spent 28.55s on a formula simplification. DAG size of input: 89 DAG size of output: 67 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:48:43,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:48:43,260 INFO L93 Difference]: Finished difference Result 401 states and 452 transitions. [2022-11-19 07:48:43,261 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2022-11-19 07:48:43,261 INFO L78 Accepts]: Start accepts. Automaton has has 79 states, 79 states have (on average 1.5569620253164558) internal successors, (123), 78 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-19 07:48:43,261 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:48:43,263 INFO L225 Difference]: With dead ends: 401 [2022-11-19 07:48:43,263 INFO L226 Difference]: Without dead ends: 384 [2022-11-19 07:48:43,265 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 67 SyntacticMatches, 1 SemanticMatches, 132 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4460 ImplicationChecksByTransitivity, 165.3s TimeCoverageRelationStatistics Valid=1048, Invalid=16674, Unknown=100, NotChecked=0, Total=17822 [2022-11-19 07:48:43,265 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 201 mSDsluCounter, 475 mSDsCounter, 0 mSdLazyCounter, 1828 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 488 SdHoareTripleChecker+Invalid, 2479 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 1828 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 594 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-19 07:48:43,266 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [201 Valid, 488 Invalid, 2479 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 1828 Invalid, 0 Unknown, 594 Unchecked, 1.6s Time] [2022-11-19 07:48:43,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2022-11-19 07:48:43,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 361. [2022-11-19 07:48:43,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 361 states, 358 states have (on average 1.1508379888268156) internal successors, (412), 360 states have internal predecessors, (412), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:48:43,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 361 states to 361 states and 412 transitions. [2022-11-19 07:48:43,273 INFO L78 Accepts]: Start accepts. Automaton has 361 states and 412 transitions. Word has length 45 [2022-11-19 07:48:43,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:48:43,273 INFO L495 AbstractCegarLoop]: Abstraction has 361 states and 412 transitions. [2022-11-19 07:48:43,273 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 79 states, 79 states have (on average 1.5569620253164558) internal successors, (123), 78 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:48:43,273 INFO L276 IsEmpty]: Start isEmpty. Operand 361 states and 412 transitions. [2022-11-19 07:48:43,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-19 07:48:43,274 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:48:43,275 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:48:43,281 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-19 07:48:43,481 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable45,36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:48:43,482 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:48:43,482 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:48:43,482 INFO L85 PathProgramCache]: Analyzing trace with hash 732291947, now seen corresponding path program 2 times [2022-11-19 07:48:43,482 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:48:43,482 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1165838042] [2022-11-19 07:48:43,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:48:43,483 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:48:43,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:48:44,134 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 12 proven. 33 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-19 07:48:44,134 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:48:44,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1165838042] [2022-11-19 07:48:44,134 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1165838042] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:48:44,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [88534990] [2022-11-19 07:48:44,134 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:48:44,135 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:48:44,135 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:48:44,139 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:48:44,159 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-19 07:48:44,527 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-19 07:48:44,527 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:48:44,531 INFO L263 TraceCheckSpWp]: Trace formula consists of 326 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-19 07:48:44,534 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:48:44,564 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-19 07:48:44,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-19 07:48:44,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:48:45,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-19 07:48:45,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 26 [2022-11-19 07:48:45,696 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:48:45,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-19 07:48:46,163 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 13 proven. 36 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-19 07:48:46,163 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:48:47,363 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:48:47,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 25 [2022-11-19 07:48:47,374 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:48:47,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 36 treesize of output 35 [2022-11-19 07:48:47,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 7 [2022-11-19 07:48:49,190 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:48:49,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:48:49,286 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 9 proven. 40 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-19 07:48:49,287 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [88534990] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:48:49,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [807538259] [2022-11-19 07:48:49,288 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-19 07:48:49,288 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:48:49,288 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:48:49,288 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:48:49,288 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:48:49,320 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:48:49,324 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:48:49,324 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:48:49,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-19 07:48:49,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:48:49,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:48:49,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-19 07:48:49,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:48:49,547 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:48:49,677 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:48:49,677 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:48:49,860 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:48:49,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:48:50,639 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:48:50,654 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:48:50,722 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:48:50,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:48:50,860 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-19 07:48:50,861 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-19 07:48:51,050 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:48:51,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:48:51,184 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:48:51,184 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:48:51,299 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:48:51,308 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:48:58,099 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22051#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrncat_#t~mem6#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post5#1.base|) |ULTIMATE.start_cstrncat_#t~post5#1.offset|)) (<= (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:48:58,099 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:48:58,099 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:48:58,099 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 20, 20] total 55 [2022-11-19 07:48:58,099 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [311342543] [2022-11-19 07:48:58,099 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:48:58,100 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2022-11-19 07:48:58,100 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:48:58,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2022-11-19 07:48:58,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=394, Invalid=4576, Unknown=0, NotChecked=0, Total=4970 [2022-11-19 07:48:58,101 INFO L87 Difference]: Start difference. First operand 361 states and 412 transitions. Second operand has 56 states, 56 states have (on average 2.107142857142857) internal successors, (118), 55 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:49:07,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:49:07,669 INFO L93 Difference]: Finished difference Result 504 states and 561 transitions. [2022-11-19 07:49:07,669 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 63 states. [2022-11-19 07:49:07,669 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 56 states have (on average 2.107142857142857) internal successors, (118), 55 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2022-11-19 07:49:07,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:49:07,672 INFO L225 Difference]: With dead ends: 504 [2022-11-19 07:49:07,672 INFO L226 Difference]: Without dead ends: 439 [2022-11-19 07:49:07,673 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 219 GetRequests, 84 SyntacticMatches, 10 SemanticMatches, 125 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5064 ImplicationChecksByTransitivity, 18.6s TimeCoverageRelationStatistics Valid=1977, Invalid=14025, Unknown=0, NotChecked=0, Total=16002 [2022-11-19 07:49:07,673 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 423 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 603 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 423 SdHoareTripleChecker+Valid, 195 SdHoareTripleChecker+Invalid, 1021 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 603 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 392 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-19 07:49:07,673 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [423 Valid, 195 Invalid, 1021 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 603 Invalid, 0 Unknown, 392 Unchecked, 0.6s Time] [2022-11-19 07:49:07,675 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439 states. [2022-11-19 07:49:07,679 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439 to 333. [2022-11-19 07:49:07,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 333 states, 330 states have (on average 1.1424242424242423) internal successors, (377), 332 states have internal predecessors, (377), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:49:07,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 333 states to 333 states and 377 transitions. [2022-11-19 07:49:07,680 INFO L78 Accepts]: Start accepts. Automaton has 333 states and 377 transitions. Word has length 46 [2022-11-19 07:49:07,680 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:49:07,681 INFO L495 AbstractCegarLoop]: Abstraction has 333 states and 377 transitions. [2022-11-19 07:49:07,681 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 56 states have (on average 2.107142857142857) internal successors, (118), 55 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:49:07,681 INFO L276 IsEmpty]: Start isEmpty. Operand 333 states and 377 transitions. [2022-11-19 07:49:07,682 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-19 07:49:07,682 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:49:07,682 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:49:07,691 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-11-19 07:49:07,888 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-11-19 07:49:07,889 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-19 07:49:07,889 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:49:07,889 INFO L85 PathProgramCache]: Analyzing trace with hash -2005448539, now seen corresponding path program 5 times [2022-11-19 07:49:07,889 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:49:07,889 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1222691953] [2022-11-19 07:49:07,889 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:49:07,889 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:49:07,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:49:08,881 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 36 proven. 84 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:49:08,881 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:49:08,881 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1222691953] [2022-11-19 07:49:08,881 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1222691953] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:49:08,881 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1113029564] [2022-11-19 07:49:08,882 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:49:08,882 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:49:08,882 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:49:08,883 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:49:08,885 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_060ff8c5-f34c-4bc8-a73f-f4dd772fe99f/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-19 07:49:09,167 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-11-19 07:49:09,168 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:49:09,171 INFO L263 TraceCheckSpWp]: Trace formula consists of 327 conjuncts, 98 conjunts are in the unsatisfiable core [2022-11-19 07:49:09,174 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:49:09,247 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-19 07:49:09,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-19 07:49:09,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:49:09,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 16 [2022-11-19 07:49:09,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 30 [2022-11-19 07:51:39,563 INFO L321 Elim1Store]: treesize reduction 24, result has 89.5 percent of original size [2022-11-19 07:51:39,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 1 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 22 case distinctions, treesize of input 82 treesize of output 238 [2022-11-19 07:51:39,605 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-19 07:51:39,606 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-19 07:51:43,391 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 46 refuted. 10 times theorem prover too weak. 65 trivial. 0 not checked. [2022-11-19 07:51:43,391 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:51:51,642 INFO L321 Elim1Store]: treesize reduction 282, result has 18.3 percent of original size [2022-11-19 07:51:51,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 7 new quantified variables, introduced 22 case distinctions, treesize of input 334 treesize of output 358 [2022-11-19 07:51:51,685 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:51:51,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 70 treesize of output 62 [2022-11-19 07:51:51,893 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:51:51,894 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 7 select indices, 7 select index equivalence classes, 6 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 15 case distinctions, treesize of input 43 treesize of output 143 [2022-11-19 07:51:52,633 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-19 07:51:52,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 6 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 22 case distinctions, treesize of input 69 treesize of output 228 [2022-11-19 07:52:13,669 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-19 07:52:13,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-19 07:52:13,861 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 56 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2022-11-19 07:52:13,861 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1113029564] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:52:13,861 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1466605103] [2022-11-19 07:52:13,862 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-19 07:52:13,862 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:52:13,862 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:52:13,863 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:52:13,863 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:52:13,900 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:52:13,907 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-19 07:52:13,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-19 07:52:13,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:52:13,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:52:13,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:52:14,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-19 07:52:14,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:52:14,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-19 07:52:14,207 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-19 07:52:14,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-19 07:52:14,383 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-19 07:52:14,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-19 07:52:15,195 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:52:15,212 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-19 07:52:15,289 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-19 07:52:15,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-19 07:52:15,361 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-19 07:52:15,372 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:52:24,669 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23370#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-19 07:52:24,669 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:52:24,669 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:52:24,669 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 22, 22] total 67 [2022-11-19 07:52:24,669 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [362435650] [2022-11-19 07:52:24,670 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:52:24,670 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 68 states [2022-11-19 07:52:24,670 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:52:24,670 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 68 interpolants. [2022-11-19 07:52:24,671 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=550, Invalid=6195, Unknown=61, NotChecked=0, Total=6806 [2022-11-19 07:52:24,671 INFO L87 Difference]: Start difference. First operand 333 states and 377 transitions. Second operand has 68 states, 67 states have (on average 1.6865671641791045) internal successors, (113), 68 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)