./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bfd8ca9d9dda86f57445168715d124831c95b647e7c1b1093bb129b0384cce9e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-22 01:54:06,085 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-22 01:54:06,087 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-22 01:54:06,132 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-22 01:54:06,132 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-22 01:54:06,136 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-22 01:54:06,138 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-22 01:54:06,141 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-22 01:54:06,143 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-22 01:54:06,149 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-22 01:54:06,149 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-22 01:54:06,150 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-22 01:54:06,151 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-22 01:54:06,152 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-22 01:54:06,152 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-22 01:54:06,153 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-22 01:54:06,154 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-22 01:54:06,155 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-22 01:54:06,157 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-22 01:54:06,158 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-22 01:54:06,165 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-22 01:54:06,168 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-22 01:54:06,169 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-22 01:54:06,170 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-22 01:54:06,185 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-22 01:54:06,185 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-22 01:54:06,185 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-22 01:54:06,187 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-22 01:54:06,188 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-22 01:54:06,189 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-22 01:54:06,189 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-22 01:54:06,190 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-22 01:54:06,191 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-22 01:54:06,193 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-22 01:54:06,194 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-22 01:54:06,194 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-22 01:54:06,195 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-22 01:54:06,195 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-22 01:54:06,195 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-22 01:54:06,196 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-22 01:54:06,197 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-22 01:54:06,198 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-22 01:54:06,240 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-22 01:54:06,240 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-22 01:54:06,241 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-22 01:54:06,241 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-22 01:54:06,242 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-22 01:54:06,242 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-22 01:54:06,242 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-22 01:54:06,242 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-22 01:54:06,242 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-22 01:54:06,243 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-22 01:54:06,243 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-22 01:54:06,244 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-22 01:54:06,244 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-22 01:54:06,244 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-22 01:54:06,244 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-22 01:54:06,245 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-22 01:54:06,245 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-22 01:54:06,245 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-22 01:54:06,246 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-22 01:54:06,246 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-22 01:54:06,246 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-22 01:54:06,246 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-22 01:54:06,246 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-22 01:54:06,247 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-22 01:54:06,247 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-22 01:54:06,247 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-22 01:54:06,248 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-22 01:54:06,248 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-22 01:54:06,248 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-22 01:54:06,249 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-22 01:54:06,249 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-22 01:54:06,249 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-22 01:54:06,249 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-22 01:54:06,249 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-22 01:54:06,250 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-22 01:54:06,250 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 01:54:06,250 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-22 01:54:06,250 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-22 01:54:06,250 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-22 01:54:06,251 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-22 01:54:06,251 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-22 01:54:06,251 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-22 01:54:06,251 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bfd8ca9d9dda86f57445168715d124831c95b647e7c1b1093bb129b0384cce9e [2022-11-22 01:54:06,540 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-22 01:54:06,562 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-22 01:54:06,564 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-22 01:54:06,566 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-22 01:54:06,566 INFO L275 PluginConnector]: CDTParser initialized [2022-11-22 01:54:06,568 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i [2022-11-22 01:54:09,585 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-22 01:54:09,818 INFO L351 CDTParser]: Found 1 translation units. [2022-11-22 01:54:09,819 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i [2022-11-22 01:54:09,830 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/data/a021e433e/978cb4fcc08a4c33969f7b5790051237/FLAG45f9be6cd [2022-11-22 01:54:09,846 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/data/a021e433e/978cb4fcc08a4c33969f7b5790051237 [2022-11-22 01:54:09,848 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-22 01:54:09,850 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-22 01:54:09,851 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-22 01:54:09,851 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-22 01:54:09,855 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-22 01:54:09,856 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 01:54:09" (1/1) ... [2022-11-22 01:54:09,857 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5088c594 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:09, skipping insertion in model container [2022-11-22 01:54:09,857 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 01:54:09" (1/1) ... [2022-11-22 01:54:09,864 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-22 01:54:09,897 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-22 01:54:10,209 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 01:54:10,229 INFO L203 MainTranslator]: Completed pre-run [2022-11-22 01:54:10,290 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 01:54:10,321 INFO L208 MainTranslator]: Completed translation [2022-11-22 01:54:10,322 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10 WrapperNode [2022-11-22 01:54:10,322 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-22 01:54:10,323 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-22 01:54:10,323 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-22 01:54:10,323 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-22 01:54:10,331 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (1/1) ... [2022-11-22 01:54:10,357 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (1/1) ... [2022-11-22 01:54:10,389 INFO L138 Inliner]: procedures = 117, calls = 16, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 94 [2022-11-22 01:54:10,389 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-22 01:54:10,390 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-22 01:54:10,391 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-22 01:54:10,391 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-22 01:54:10,400 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (1/1) ... [2022-11-22 01:54:10,400 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (1/1) ... [2022-11-22 01:54:10,415 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (1/1) ... [2022-11-22 01:54:10,415 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (1/1) ... [2022-11-22 01:54:10,420 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (1/1) ... [2022-11-22 01:54:10,424 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (1/1) ... [2022-11-22 01:54:10,425 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (1/1) ... [2022-11-22 01:54:10,426 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (1/1) ... [2022-11-22 01:54:10,428 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-22 01:54:10,429 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-22 01:54:10,430 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-22 01:54:10,430 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-22 01:54:10,430 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (1/1) ... [2022-11-22 01:54:10,437 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 01:54:10,450 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:10,461 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-22 01:54:10,464 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-22 01:54:10,519 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-22 01:54:10,519 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-22 01:54:10,520 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-22 01:54:10,520 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-22 01:54:10,520 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-22 01:54:10,520 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-22 01:54:10,650 INFO L235 CfgBuilder]: Building ICFG [2022-11-22 01:54:10,652 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-22 01:54:10,951 INFO L276 CfgBuilder]: Performing block encoding [2022-11-22 01:54:11,039 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-22 01:54:11,039 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-22 01:54:11,042 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 01:54:11 BoogieIcfgContainer [2022-11-22 01:54:11,046 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-22 01:54:11,048 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-22 01:54:11,054 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-22 01:54:11,057 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-22 01:54:11,058 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.11 01:54:09" (1/3) ... [2022-11-22 01:54:11,058 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@47e3b515 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 01:54:11, skipping insertion in model container [2022-11-22 01:54:11,059 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:54:10" (2/3) ... [2022-11-22 01:54:11,059 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@47e3b515 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 01:54:11, skipping insertion in model container [2022-11-22 01:54:11,059 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 01:54:11" (3/3) ... [2022-11-22 01:54:11,061 INFO L112 eAbstractionObserver]: Analyzing ICFG cstrcat-alloca-2.i [2022-11-22 01:54:11,083 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-22 01:54:11,083 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 15 error locations. [2022-11-22 01:54:11,122 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-22 01:54:11,128 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1196d111, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-22 01:54:11,128 INFO L358 AbstractCegarLoop]: Starting to check reachability of 15 error locations. [2022-11-22 01:54:11,132 INFO L276 IsEmpty]: Start isEmpty. Operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:11,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-22 01:54:11,139 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:11,139 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-22 01:54:11,140 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:11,145 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:11,146 INFO L85 PathProgramCache]: Analyzing trace with hash 147851, now seen corresponding path program 1 times [2022-11-22 01:54:11,156 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:11,156 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1353306718] [2022-11-22 01:54:11,157 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:11,157 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:11,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:11,357 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:11,358 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:11,358 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1353306718] [2022-11-22 01:54:11,359 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1353306718] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:11,359 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:54:11,359 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-22 01:54:11,360 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [312826482] [2022-11-22 01:54:11,363 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:11,368 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 01:54:11,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:11,399 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 01:54:11,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:54:11,402 INFO L87 Difference]: Start difference. First operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:11,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:11,506 INFO L93 Difference]: Finished difference Result 33 states and 37 transitions. [2022-11-22 01:54:11,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 01:54:11,517 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-22 01:54:11,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:11,524 INFO L225 Difference]: With dead ends: 33 [2022-11-22 01:54:11,525 INFO L226 Difference]: Without dead ends: 31 [2022-11-22 01:54:11,526 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:54:11,530 INFO L413 NwaCegarLoop]: 27 mSDtfsCounter, 1 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:11,533 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 41 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:54:11,551 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-11-22 01:54:11,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2022-11-22 01:54:11,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 16 states have (on average 2.125) internal successors, (34), 30 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:11,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 34 transitions. [2022-11-22 01:54:11,569 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 34 transitions. Word has length 3 [2022-11-22 01:54:11,570 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:11,570 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 34 transitions. [2022-11-22 01:54:11,570 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:11,572 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 34 transitions. [2022-11-22 01:54:11,572 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 01:54:11,572 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:11,572 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 01:54:11,573 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-22 01:54:11,574 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:11,575 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:11,575 INFO L85 PathProgramCache]: Analyzing trace with hash 4583106, now seen corresponding path program 1 times [2022-11-22 01:54:11,576 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:11,576 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2064154620] [2022-11-22 01:54:11,576 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:11,576 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:11,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:11,938 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:11,939 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:11,939 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2064154620] [2022-11-22 01:54:11,940 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2064154620] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:11,940 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:54:11,940 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 01:54:11,940 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [217385819] [2022-11-22 01:54:11,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:11,942 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 01:54:11,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:11,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 01:54:11,944 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:54:11,944 INFO L87 Difference]: Start difference. First operand 31 states and 34 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:12,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:12,007 INFO L93 Difference]: Finished difference Result 29 states and 32 transitions. [2022-11-22 01:54:12,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 01:54:12,007 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 01:54:12,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:12,009 INFO L225 Difference]: With dead ends: 29 [2022-11-22 01:54:12,010 INFO L226 Difference]: Without dead ends: 29 [2022-11-22 01:54:12,010 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:54:12,012 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 27 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:12,014 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 14 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:54:12,015 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-22 01:54:12,019 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-22 01:54:12,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 16 states have (on average 2.0) internal successors, (32), 28 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:12,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 32 transitions. [2022-11-22 01:54:12,022 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 32 transitions. Word has length 4 [2022-11-22 01:54:12,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:12,027 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 32 transitions. [2022-11-22 01:54:12,027 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:12,027 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 32 transitions. [2022-11-22 01:54:12,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 01:54:12,029 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:12,029 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 01:54:12,030 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-22 01:54:12,030 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:12,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:12,031 INFO L85 PathProgramCache]: Analyzing trace with hash 4583107, now seen corresponding path program 1 times [2022-11-22 01:54:12,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:12,032 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2137222697] [2022-11-22 01:54:12,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:12,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:12,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:12,325 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:12,326 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:12,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2137222697] [2022-11-22 01:54:12,326 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2137222697] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:12,327 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:54:12,327 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:54:12,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2066627967] [2022-11-22 01:54:12,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:12,329 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:54:12,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:12,331 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:54:12,331 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:54:12,331 INFO L87 Difference]: Start difference. First operand 29 states and 32 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:12,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:12,485 INFO L93 Difference]: Finished difference Result 55 states and 61 transitions. [2022-11-22 01:54:12,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:54:12,486 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 01:54:12,487 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:12,490 INFO L225 Difference]: With dead ends: 55 [2022-11-22 01:54:12,490 INFO L226 Difference]: Without dead ends: 55 [2022-11-22 01:54:12,490 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-22 01:54:12,496 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 88 mSDsluCounter, 24 mSDsCounter, 0 mSdLazyCounter, 58 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 37 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 58 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:12,497 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 37 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 58 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:54:12,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-22 01:54:12,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 31. [2022-11-22 01:54:12,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:12,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-11-22 01:54:12,501 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 4 [2022-11-22 01:54:12,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:12,502 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-11-22 01:54:12,502 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:12,502 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-11-22 01:54:12,503 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 01:54:12,503 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:12,503 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 01:54:12,503 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-22 01:54:12,503 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:12,504 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:12,504 INFO L85 PathProgramCache]: Analyzing trace with hash 142164286, now seen corresponding path program 1 times [2022-11-22 01:54:12,504 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:12,504 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1205616007] [2022-11-22 01:54:12,505 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:12,505 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:12,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:12,604 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:12,605 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:12,605 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1205616007] [2022-11-22 01:54:12,605 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1205616007] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:12,605 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:54:12,605 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 01:54:12,606 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1737635048] [2022-11-22 01:54:12,606 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:12,607 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 01:54:12,607 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:12,608 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 01:54:12,610 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:54:12,610 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:12,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:12,641 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-11-22 01:54:12,642 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 01:54:12,642 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 01:54:12,642 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:12,644 INFO L225 Difference]: With dead ends: 29 [2022-11-22 01:54:12,645 INFO L226 Difference]: Without dead ends: 29 [2022-11-22 01:54:12,645 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:54:12,654 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 24 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:12,655 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 14 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:54:12,658 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-22 01:54:12,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-22 01:54:12,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 18 states have (on average 1.8333333333333333) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:12,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-11-22 01:54:12,660 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 5 [2022-11-22 01:54:12,660 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:12,661 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-11-22 01:54:12,661 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:12,661 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-11-22 01:54:12,661 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 01:54:12,661 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:12,662 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 01:54:12,662 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-22 01:54:12,662 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:12,662 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:12,665 INFO L85 PathProgramCache]: Analyzing trace with hash 142164287, now seen corresponding path program 1 times [2022-11-22 01:54:12,665 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:12,665 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1297359978] [2022-11-22 01:54:12,666 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:12,666 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:12,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:12,950 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:12,950 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:12,950 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1297359978] [2022-11-22 01:54:12,950 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1297359978] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:12,951 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:54:12,951 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 01:54:12,951 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [37705856] [2022-11-22 01:54:12,951 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:12,952 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 01:54:12,952 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:12,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 01:54:12,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-22 01:54:12,953 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:13,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:13,056 INFO L93 Difference]: Finished difference Result 50 states and 56 transitions. [2022-11-22 01:54:13,057 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 01:54:13,057 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 01:54:13,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:13,057 INFO L225 Difference]: With dead ends: 50 [2022-11-22 01:54:13,058 INFO L226 Difference]: Without dead ends: 50 [2022-11-22 01:54:13,058 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-22 01:54:13,059 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 125 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:13,059 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 30 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:54:13,060 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-22 01:54:13,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 31. [2022-11-22 01:54:13,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 20 states have (on average 1.8) internal successors, (36), 30 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:13,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 36 transitions. [2022-11-22 01:54:13,063 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 36 transitions. Word has length 5 [2022-11-22 01:54:13,064 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:13,064 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 36 transitions. [2022-11-22 01:54:13,064 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:13,064 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 36 transitions. [2022-11-22 01:54:13,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 01:54:13,065 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:13,065 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 01:54:13,065 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-22 01:54:13,065 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:13,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:13,066 INFO L85 PathProgramCache]: Analyzing trace with hash 142166373, now seen corresponding path program 1 times [2022-11-22 01:54:13,066 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:13,066 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1748344756] [2022-11-22 01:54:13,067 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:13,067 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:13,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:13,123 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:13,124 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:13,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1748344756] [2022-11-22 01:54:13,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1748344756] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:13,124 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:54:13,124 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:54:13,124 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [388903344] [2022-11-22 01:54:13,125 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:13,125 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 01:54:13,125 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:13,125 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 01:54:13,127 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:54:13,127 INFO L87 Difference]: Start difference. First operand 31 states and 36 transitions. Second operand has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:13,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:13,155 INFO L93 Difference]: Finished difference Result 31 states and 35 transitions. [2022-11-22 01:54:13,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:54:13,155 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 01:54:13,155 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:13,156 INFO L225 Difference]: With dead ends: 31 [2022-11-22 01:54:13,156 INFO L226 Difference]: Without dead ends: 31 [2022-11-22 01:54:13,156 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:54:13,157 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 31 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:13,158 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 41 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:54:13,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-11-22 01:54:13,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2022-11-22 01:54:13,163 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 20 states have (on average 1.75) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:13,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-11-22 01:54:13,171 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 5 [2022-11-22 01:54:13,171 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:13,171 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-11-22 01:54:13,171 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:13,172 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-11-22 01:54:13,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-22 01:54:13,172 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:13,172 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-22 01:54:13,173 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-22 01:54:13,173 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:13,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:13,174 INFO L85 PathProgramCache]: Analyzing trace with hash 109470704, now seen corresponding path program 1 times [2022-11-22 01:54:13,174 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:13,174 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [15214074] [2022-11-22 01:54:13,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:13,174 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:13,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:13,507 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:13,508 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:13,508 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [15214074] [2022-11-22 01:54:13,508 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [15214074] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:13,508 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1184646803] [2022-11-22 01:54:13,508 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:13,509 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:13,509 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:13,515 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:13,534 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-22 01:54:13,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:13,592 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-22 01:54:13,597 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:13,724 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:13,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:54:13,761 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:54:13,947 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:13,947 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:14,177 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:14,188 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:14,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1184646803] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:14,189 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [746385677] [2022-11-22 01:54:14,207 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-22 01:54:14,207 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:14,211 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:14,216 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:14,216 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:14,326 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:14,329 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:14,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:14,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:14,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:14,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:14,652 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:15,154 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '515#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_#t~nondet13#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet13#1|)) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:15,155 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:15,155 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:15,155 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 11 [2022-11-22 01:54:15,155 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [209608418] [2022-11-22 01:54:15,155 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:15,156 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-22 01:54:15,156 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:15,156 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-22 01:54:15,156 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2022-11-22 01:54:15,156 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:15,522 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:15,522 INFO L93 Difference]: Finished difference Result 76 states and 85 transitions. [2022-11-22 01:54:15,523 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-22 01:54:15,523 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-22 01:54:15,523 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:15,524 INFO L225 Difference]: With dead ends: 76 [2022-11-22 01:54:15,524 INFO L226 Difference]: Without dead ends: 76 [2022-11-22 01:54:15,524 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 4 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-11-22 01:54:15,525 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 225 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 184 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:15,525 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [225 Valid, 110 Invalid, 184 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:54:15,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-22 01:54:15,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 27. [2022-11-22 01:54:15,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 18 states have (on average 1.6666666666666667) internal successors, (30), 26 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:15,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 30 transitions. [2022-11-22 01:54:15,528 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 30 transitions. Word has length 6 [2022-11-22 01:54:15,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:15,529 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 30 transitions. [2022-11-22 01:54:15,529 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:15,529 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 30 transitions. [2022-11-22 01:54:15,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 01:54:15,529 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:15,529 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1] [2022-11-22 01:54:15,541 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:15,730 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:15,730 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:15,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:15,731 INFO L85 PathProgramCache]: Analyzing trace with hash -819016292, now seen corresponding path program 1 times [2022-11-22 01:54:15,731 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:15,731 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [501514518] [2022-11-22 01:54:15,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:15,732 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:15,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:15,979 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:15,979 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:15,979 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [501514518] [2022-11-22 01:54:15,979 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [501514518] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:15,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2058459670] [2022-11-22 01:54:15,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:15,980 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:15,981 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:15,983 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:16,011 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-22 01:54:16,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:16,062 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-22 01:54:16,064 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:16,131 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 01:54:16,131 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 01:54:16,308 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:16,309 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:16,479 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:16,479 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2058459670] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:16,479 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [704721996] [2022-11-22 01:54:16,481 INFO L159 IcfgInterpreter]: Started Sifa with 6 locations of interest [2022-11-22 01:54:16,481 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:16,482 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:16,482 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:16,482 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:16,528 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:16,530 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:16,531 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:16,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:16,683 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:16,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:16,769 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:17,431 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '683#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet15#1| 127) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet15#1|)) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:17,431 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:17,431 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:17,432 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-11-22 01:54:17,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [311592048] [2022-11-22 01:54:17,432 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:17,432 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-22 01:54:17,432 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:17,433 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-22 01:54:17,433 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=112, Invalid=350, Unknown=0, NotChecked=0, Total=462 [2022-11-22 01:54:17,433 INFO L87 Difference]: Start difference. First operand 27 states and 30 transitions. Second operand has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:17,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:17,708 INFO L93 Difference]: Finished difference Result 46 states and 51 transitions. [2022-11-22 01:54:17,708 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-22 01:54:17,708 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 01:54:17,709 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:17,709 INFO L225 Difference]: With dead ends: 46 [2022-11-22 01:54:17,709 INFO L226 Difference]: Without dead ends: 46 [2022-11-22 01:54:17,709 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 142 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=156, Invalid=444, Unknown=0, NotChecked=0, Total=600 [2022-11-22 01:54:17,710 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 309 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 309 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:17,710 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [309 Valid, 58 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:54:17,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-22 01:54:17,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 25. [2022-11-22 01:54:17,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 24 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:17,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 28 transitions. [2022-11-22 01:54:17,712 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 28 transitions. Word has length 7 [2022-11-22 01:54:17,712 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:17,712 INFO L495 AbstractCegarLoop]: Abstraction has 25 states and 28 transitions. [2022-11-22 01:54:17,712 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:17,713 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 28 transitions. [2022-11-22 01:54:17,713 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-22 01:54:17,713 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:17,713 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:17,732 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:17,921 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-11-22 01:54:17,921 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:17,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:17,922 INFO L85 PathProgramCache]: Analyzing trace with hash 380363394, now seen corresponding path program 1 times [2022-11-22 01:54:17,922 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:17,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1470705029] [2022-11-22 01:54:17,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:17,922 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:17,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:18,231 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:18,232 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:18,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1470705029] [2022-11-22 01:54:18,232 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1470705029] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:18,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [973949649] [2022-11-22 01:54:18,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:18,233 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:18,233 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:18,234 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:18,262 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-22 01:54:18,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:18,319 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-22 01:54:18,323 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:18,467 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:18,467 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-22 01:54:18,468 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [973949649] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:18,468 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-22 01:54:18,468 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 10 [2022-11-22 01:54:18,468 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2084467422] [2022-11-22 01:54:18,468 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:18,469 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-22 01:54:18,469 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:18,470 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-22 01:54:18,470 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=99, Unknown=0, NotChecked=0, Total=132 [2022-11-22 01:54:18,470 INFO L87 Difference]: Start difference. First operand 25 states and 28 transitions. Second operand has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:18,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:18,561 INFO L93 Difference]: Finished difference Result 25 states and 28 transitions. [2022-11-22 01:54:18,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-22 01:54:18,562 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-22 01:54:18,562 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:18,564 INFO L225 Difference]: With dead ends: 25 [2022-11-22 01:54:18,564 INFO L226 Difference]: Without dead ends: 25 [2022-11-22 01:54:18,565 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=47, Invalid=135, Unknown=0, NotChecked=0, Total=182 [2022-11-22 01:54:18,567 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 64 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 9 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:18,568 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 9 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:54:18,569 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25 states. [2022-11-22 01:54:18,570 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25 to 24. [2022-11-22 01:54:18,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 17 states have (on average 1.588235294117647) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:18,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 27 transitions. [2022-11-22 01:54:18,571 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 27 transitions. Word has length 8 [2022-11-22 01:54:18,571 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:18,572 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 27 transitions. [2022-11-22 01:54:18,572 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:18,572 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 27 transitions. [2022-11-22 01:54:18,572 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-22 01:54:18,572 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:18,573 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:18,579 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:18,778 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-22 01:54:18,779 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:18,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:18,779 INFO L85 PathProgramCache]: Analyzing trace with hash -1093635206, now seen corresponding path program 1 times [2022-11-22 01:54:18,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:18,779 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1851333337] [2022-11-22 01:54:18,779 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:18,779 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:18,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:18,834 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:18,834 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:18,835 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1851333337] [2022-11-22 01:54:18,835 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1851333337] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:18,835 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:54:18,835 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:54:18,835 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [348060728] [2022-11-22 01:54:18,835 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:18,836 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 01:54:18,836 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:18,836 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 01:54:18,836 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:54:18,837 INFO L87 Difference]: Start difference. First operand 24 states and 27 transitions. Second operand has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:18,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:18,873 INFO L93 Difference]: Finished difference Result 23 states and 26 transitions. [2022-11-22 01:54:18,873 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:54:18,873 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-22 01:54:18,874 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:18,874 INFO L225 Difference]: With dead ends: 23 [2022-11-22 01:54:18,874 INFO L226 Difference]: Without dead ends: 23 [2022-11-22 01:54:18,874 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:54:18,875 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 29 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 11 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:18,876 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 11 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:54:18,876 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23 states. [2022-11-22 01:54:18,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23 to 23. [2022-11-22 01:54:18,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 17 states have (on average 1.5294117647058822) internal successors, (26), 22 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:18,882 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 26 transitions. [2022-11-22 01:54:18,882 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 26 transitions. Word has length 9 [2022-11-22 01:54:18,882 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:18,883 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 26 transitions. [2022-11-22 01:54:18,883 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:18,883 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions. [2022-11-22 01:54:18,883 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-22 01:54:18,883 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:18,883 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:18,884 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-22 01:54:18,884 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:18,884 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:18,885 INFO L85 PathProgramCache]: Analyzing trace with hash -1093635205, now seen corresponding path program 1 times [2022-11-22 01:54:18,885 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:18,885 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [929010564] [2022-11-22 01:54:18,885 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:18,885 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:18,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:19,080 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:19,080 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:19,080 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [929010564] [2022-11-22 01:54:19,080 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [929010564] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:19,080 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1733195931] [2022-11-22 01:54:19,080 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:19,080 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:19,081 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:19,081 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:19,106 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-22 01:54:19,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:19,173 INFO L263 TraceCheckSpWp]: Trace formula consists of 109 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-22 01:54:19,175 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:19,190 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:54:19,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:54:19,271 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:19,271 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:19,334 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:19,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1733195931] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:19,335 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-22 01:54:19,335 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6, 5] total 12 [2022-11-22 01:54:19,335 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2093593601] [2022-11-22 01:54:19,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:19,335 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 01:54:19,335 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:19,335 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 01:54:19,336 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=108, Unknown=0, NotChecked=0, Total=156 [2022-11-22 01:54:19,336 INFO L87 Difference]: Start difference. First operand 23 states and 26 transitions. Second operand has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:19,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:19,419 INFO L93 Difference]: Finished difference Result 26 states and 29 transitions. [2022-11-22 01:54:19,419 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 01:54:19,420 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-22 01:54:19,420 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:19,420 INFO L225 Difference]: With dead ends: 26 [2022-11-22 01:54:19,420 INFO L226 Difference]: Without dead ends: 26 [2022-11-22 01:54:19,420 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=65, Invalid=145, Unknown=0, NotChecked=0, Total=210 [2022-11-22 01:54:19,421 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 48 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:19,421 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 17 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:54:19,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26 states. [2022-11-22 01:54:19,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26 to 24. [2022-11-22 01:54:19,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 18 states have (on average 1.5) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:19,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 27 transitions. [2022-11-22 01:54:19,423 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 27 transitions. Word has length 9 [2022-11-22 01:54:19,423 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:19,423 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 27 transitions. [2022-11-22 01:54:19,423 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:19,423 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 27 transitions. [2022-11-22 01:54:19,424 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 01:54:19,424 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:19,424 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:19,434 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:19,624 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:19,624 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:19,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:19,625 INFO L85 PathProgramCache]: Analyzing trace with hash 1283556116, now seen corresponding path program 1 times [2022-11-22 01:54:19,625 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:19,625 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [382587461] [2022-11-22 01:54:19,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:19,625 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:19,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:19,979 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:19,979 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:19,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [382587461] [2022-11-22 01:54:19,980 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [382587461] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:19,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2132243394] [2022-11-22 01:54:19,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:19,980 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:19,981 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:19,982 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:19,991 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-22 01:54:20,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:20,068 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 31 conjunts are in the unsatisfiable core [2022-11-22 01:54:20,071 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:20,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:20,289 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:20,291 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:54:20,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 01:54:20,310 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:20,310 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:20,336 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 01:54:20,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-22 01:54:20,559 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:20,559 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2132243394] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:20,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [644554425] [2022-11-22 01:54:20,561 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:54:20,562 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:20,562 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:20,562 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:20,562 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:20,607 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:20,609 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:20,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:20,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:20,747 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:20,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:20,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:20,927 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:54:20,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:54:21,023 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:22,557 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1100#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:22,557 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:22,557 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:22,557 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 9, 9] total 22 [2022-11-22 01:54:22,558 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1976705041] [2022-11-22 01:54:22,558 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:22,558 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-22 01:54:22,558 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:22,559 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-22 01:54:22,559 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=112, Invalid=818, Unknown=0, NotChecked=0, Total=930 [2022-11-22 01:54:22,560 INFO L87 Difference]: Start difference. First operand 24 states and 27 transitions. Second operand has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:23,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:23,368 INFO L93 Difference]: Finished difference Result 54 states and 58 transitions. [2022-11-22 01:54:23,369 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-22 01:54:23,369 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 01:54:23,369 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:23,370 INFO L225 Difference]: With dead ends: 54 [2022-11-22 01:54:23,370 INFO L226 Difference]: Without dead ends: 54 [2022-11-22 01:54:23,371 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 278 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=257, Invalid=1303, Unknown=0, NotChecked=0, Total=1560 [2022-11-22 01:54:23,371 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 289 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 263 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 289 SdHoareTripleChecker+Valid, 98 SdHoareTripleChecker+Invalid, 268 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 263 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:23,371 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [289 Valid, 98 Invalid, 268 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 263 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:54:23,372 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2022-11-22 01:54:23,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 30. [2022-11-22 01:54:23,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 24 states have (on average 1.4166666666666667) internal successors, (34), 29 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:23,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 34 transitions. [2022-11-22 01:54:23,374 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 34 transitions. Word has length 11 [2022-11-22 01:54:23,374 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:23,374 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 34 transitions. [2022-11-22 01:54:23,375 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:23,375 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 34 transitions. [2022-11-22 01:54:23,375 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-22 01:54:23,375 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:23,375 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:23,387 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:23,581 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-22 01:54:23,582 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:23,582 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:23,582 INFO L85 PathProgramCache]: Analyzing trace with hash 1135532470, now seen corresponding path program 1 times [2022-11-22 01:54:23,582 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:23,583 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2086252991] [2022-11-22 01:54:23,583 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:23,583 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:23,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:23,649 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:54:23,649 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:23,649 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2086252991] [2022-11-22 01:54:23,650 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2086252991] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:23,650 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:54:23,650 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 01:54:23,650 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [270480601] [2022-11-22 01:54:23,650 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:23,651 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:54:23,651 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:23,652 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:54:23,652 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:54:23,652 INFO L87 Difference]: Start difference. First operand 30 states and 34 transitions. Second operand has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:23,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:23,701 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-11-22 01:54:23,702 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:54:23,702 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-22 01:54:23,702 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:23,703 INFO L225 Difference]: With dead ends: 29 [2022-11-22 01:54:23,703 INFO L226 Difference]: Without dead ends: 29 [2022-11-22 01:54:23,704 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-22 01:54:23,705 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 33 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:23,706 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 17 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:54:23,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-22 01:54:23,711 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-22 01:54:23,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 24 states have (on average 1.375) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:23,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-11-22 01:54:23,715 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 12 [2022-11-22 01:54:23,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:23,715 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-11-22 01:54:23,715 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:23,716 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-11-22 01:54:23,716 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-22 01:54:23,716 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:23,716 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:23,716 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-11-22 01:54:23,717 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:23,717 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:23,717 INFO L85 PathProgramCache]: Analyzing trace with hash 1135532471, now seen corresponding path program 1 times [2022-11-22 01:54:23,718 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:23,718 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [979764963] [2022-11-22 01:54:23,718 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:23,718 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:23,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:23,857 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:54:23,857 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:23,857 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [979764963] [2022-11-22 01:54:23,857 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [979764963] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:23,857 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:54:23,858 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-22 01:54:23,858 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [492558101] [2022-11-22 01:54:23,858 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:23,859 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 01:54:23,859 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:23,859 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 01:54:23,859 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-22 01:54:23,860 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:23,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:23,943 INFO L93 Difference]: Finished difference Result 44 states and 52 transitions. [2022-11-22 01:54:23,943 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 01:54:23,944 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-22 01:54:23,944 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:23,944 INFO L225 Difference]: With dead ends: 44 [2022-11-22 01:54:23,944 INFO L226 Difference]: Without dead ends: 44 [2022-11-22 01:54:23,944 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2022-11-22 01:54:23,945 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 35 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 68 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:23,945 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 29 Invalid, 68 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:54:23,946 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2022-11-22 01:54:23,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 31. [2022-11-22 01:54:23,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 26 states have (on average 1.3461538461538463) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:23,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-11-22 01:54:23,954 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 12 [2022-11-22 01:54:23,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:23,954 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-11-22 01:54:23,954 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:23,954 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-11-22 01:54:23,955 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-22 01:54:23,955 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:23,955 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:23,956 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-22 01:54:23,956 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:23,956 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:23,957 INFO L85 PathProgramCache]: Analyzing trace with hash -1753115215, now seen corresponding path program 2 times [2022-11-22 01:54:23,957 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:23,957 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [722657007] [2022-11-22 01:54:23,957 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:23,957 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:23,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:24,222 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:24,222 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:24,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [722657007] [2022-11-22 01:54:24,223 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [722657007] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:24,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1683427246] [2022-11-22 01:54:24,223 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:54:24,223 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:24,224 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:24,225 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:24,254 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-22 01:54:24,323 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-22 01:54:24,323 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:54:24,325 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-22 01:54:24,326 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:24,343 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:54:24,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:54:24,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:24,427 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:54:24,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-22 01:54:24,498 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:54:24,498 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:24,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 01:54:24,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-22 01:54:24,691 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:54:24,691 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1683427246] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:24,691 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [453854492] [2022-11-22 01:54:24,693 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:54:24,693 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:24,694 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:24,694 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:24,694 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:24,751 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:24,754 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:24,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:24,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:24,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:24,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:24,992 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:25,067 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:54:25,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:54:25,184 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:26,487 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1451#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:26,487 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:26,487 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:26,487 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 15 [2022-11-22 01:54:26,487 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1163941218] [2022-11-22 01:54:26,487 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:26,487 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-11-22 01:54:26,488 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:26,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-11-22 01:54:26,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=491, Unknown=0, NotChecked=0, Total=600 [2022-11-22 01:54:26,489 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 16 states, 15 states have (on average 2.2) internal successors, (33), 16 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:26,849 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:26,849 INFO L93 Difference]: Finished difference Result 58 states and 64 transitions. [2022-11-22 01:54:26,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-22 01:54:26,850 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 15 states have (on average 2.2) internal successors, (33), 16 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-22 01:54:26,850 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:26,850 INFO L225 Difference]: With dead ends: 58 [2022-11-22 01:54:26,851 INFO L226 Difference]: Without dead ends: 58 [2022-11-22 01:54:26,851 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 200 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=175, Invalid=755, Unknown=0, NotChecked=0, Total=930 [2022-11-22 01:54:26,852 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 95 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 193 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:26,852 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 69 Invalid, 193 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:54:26,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-11-22 01:54:26,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 33. [2022-11-22 01:54:26,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 28 states have (on average 1.3571428571428572) internal successors, (38), 32 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:26,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 38 transitions. [2022-11-22 01:54:26,854 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 38 transitions. Word has length 13 [2022-11-22 01:54:26,854 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:26,854 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 38 transitions. [2022-11-22 01:54:26,854 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 15 states have (on average 2.2) internal successors, (33), 16 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:26,854 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 38 transitions. [2022-11-22 01:54:26,855 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-22 01:54:26,855 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:26,855 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:26,869 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:27,064 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-11-22 01:54:27,065 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:27,065 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:27,065 INFO L85 PathProgramCache]: Analyzing trace with hash 841768262, now seen corresponding path program 1 times [2022-11-22 01:54:27,065 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:27,065 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2050397889] [2022-11-22 01:54:27,066 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:27,066 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:27,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:27,106 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:54:27,106 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:27,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2050397889] [2022-11-22 01:54:27,107 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2050397889] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:27,107 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:54:27,107 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:54:27,107 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1391254494] [2022-11-22 01:54:27,107 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:27,108 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 01:54:27,108 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:27,108 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 01:54:27,108 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:54:27,109 INFO L87 Difference]: Start difference. First operand 33 states and 38 transitions. Second operand has 4 states, 3 states have (on average 4.333333333333333) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:27,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:27,149 INFO L93 Difference]: Finished difference Result 32 states and 37 transitions. [2022-11-22 01:54:27,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:54:27,150 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 4.333333333333333) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-22 01:54:27,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:27,150 INFO L225 Difference]: With dead ends: 32 [2022-11-22 01:54:27,150 INFO L226 Difference]: Without dead ends: 32 [2022-11-22 01:54:27,151 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:54:27,151 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 10 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:27,151 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 14 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:54:27,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-11-22 01:54:27,153 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 32. [2022-11-22 01:54:27,154 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 28 states have (on average 1.3214285714285714) internal successors, (37), 31 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:27,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 37 transitions. [2022-11-22 01:54:27,154 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 37 transitions. Word has length 13 [2022-11-22 01:54:27,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:27,155 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 37 transitions. [2022-11-22 01:54:27,155 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 4.333333333333333) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:27,155 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 37 transitions. [2022-11-22 01:54:27,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-22 01:54:27,157 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:27,157 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:27,157 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-11-22 01:54:27,158 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:27,158 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:27,158 INFO L85 PathProgramCache]: Analyzing trace with hash 841768263, now seen corresponding path program 1 times [2022-11-22 01:54:27,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:27,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1516385429] [2022-11-22 01:54:27,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:27,159 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:27,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:27,333 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:27,333 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:27,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1516385429] [2022-11-22 01:54:27,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1516385429] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:27,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [684900528] [2022-11-22 01:54:27,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:27,334 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:27,334 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:27,339 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:27,362 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-22 01:54:27,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:27,428 INFO L263 TraceCheckSpWp]: Trace formula consists of 139 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-22 01:54:27,429 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:27,442 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:54:27,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:54:27,505 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:27,505 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:27,582 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:27,582 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [684900528] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:27,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [732833540] [2022-11-22 01:54:27,587 INFO L159 IcfgInterpreter]: Started Sifa with 13 locations of interest [2022-11-22 01:54:27,588 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:27,588 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:27,588 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:27,588 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:27,644 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:27,647 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:27,648 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:27,748 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:27,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:27,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:27,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:28,027 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:54:28,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:54:28,164 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:30,856 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [732833540] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:30,856 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:30,857 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [6, 6, 6] total 24 [2022-11-22 01:54:30,857 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [877485355] [2022-11-22 01:54:30,857 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:30,857 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-22 01:54:30,858 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:30,858 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-22 01:54:30,858 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=457, Unknown=0, NotChecked=0, Total=600 [2022-11-22 01:54:30,859 INFO L87 Difference]: Start difference. First operand 32 states and 37 transitions. Second operand has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:34,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:34,195 INFO L93 Difference]: Finished difference Result 68 states and 78 transitions. [2022-11-22 01:54:34,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-22 01:54:34,196 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-22 01:54:34,196 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:34,196 INFO L225 Difference]: With dead ends: 68 [2022-11-22 01:54:34,196 INFO L226 Difference]: Without dead ends: 57 [2022-11-22 01:54:34,197 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 19 SyntacticMatches, 1 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 229 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=297, Invalid=825, Unknown=0, NotChecked=0, Total=1122 [2022-11-22 01:54:34,200 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 65 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 40 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:34,200 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 40 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-22 01:54:34,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-22 01:54:34,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 51. [2022-11-22 01:54:34,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 47 states have (on average 1.3191489361702127) internal successors, (62), 50 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:34,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 62 transitions. [2022-11-22 01:54:34,203 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 62 transitions. Word has length 13 [2022-11-22 01:54:34,203 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:34,203 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 62 transitions. [2022-11-22 01:54:34,203 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:34,204 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 62 transitions. [2022-11-22 01:54:34,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-22 01:54:34,204 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:34,204 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:34,216 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:34,415 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:34,415 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:34,415 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:34,416 INFO L85 PathProgramCache]: Analyzing trace with hash -1249350982, now seen corresponding path program 1 times [2022-11-22 01:54:34,416 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:34,416 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [963816081] [2022-11-22 01:54:34,416 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:34,416 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:34,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:34,573 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:34,573 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:34,573 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [963816081] [2022-11-22 01:54:34,574 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [963816081] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:34,574 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [136171165] [2022-11-22 01:54:34,574 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:34,574 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:34,574 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:34,575 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:34,594 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-22 01:54:34,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:34,669 INFO L263 TraceCheckSpWp]: Trace formula consists of 152 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-22 01:54:34,670 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:34,785 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:34,785 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:34,915 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:34,916 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [136171165] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:34,916 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [710528470] [2022-11-22 01:54:34,918 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 01:54:34,918 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:34,918 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:34,918 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:34,919 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:34,960 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:34,963 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:34,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:35,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:35,069 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:35,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:35,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:35,218 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:35,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:35,284 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:35,333 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:35,388 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:54:35,389 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:54:35,520 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:38,374 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [710528470] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:38,374 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:38,374 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [8, 7, 7] total 30 [2022-11-22 01:54:38,375 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1753069329] [2022-11-22 01:54:38,375 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:38,375 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-22 01:54:38,375 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:38,376 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-22 01:54:38,376 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=138, Invalid=732, Unknown=0, NotChecked=0, Total=870 [2022-11-22 01:54:38,376 INFO L87 Difference]: Start difference. First operand 51 states and 62 transitions. Second operand has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:38,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:38,575 INFO L93 Difference]: Finished difference Result 62 states and 75 transitions. [2022-11-22 01:54:38,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-22 01:54:38,576 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-22 01:54:38,576 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:38,576 INFO L225 Difference]: With dead ends: 62 [2022-11-22 01:54:38,577 INFO L226 Difference]: Without dead ends: 62 [2022-11-22 01:54:38,577 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 22 SyntacticMatches, 1 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 264 ImplicationChecksByTransitivity, 3.0s TimeCoverageRelationStatistics Valid=138, Invalid=732, Unknown=0, NotChecked=0, Total=870 [2022-11-22 01:54:38,578 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 46 mSDsluCounter, 19 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 22 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:38,578 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 22 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:54:38,579 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-22 01:54:38,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 54. [2022-11-22 01:54:38,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 50 states have (on average 1.3) internal successors, (65), 53 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:38,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 65 transitions. [2022-11-22 01:54:38,581 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 65 transitions. Word has length 15 [2022-11-22 01:54:38,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:38,581 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 65 transitions. [2022-11-22 01:54:38,581 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:38,581 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 65 transitions. [2022-11-22 01:54:38,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-22 01:54:38,582 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:38,582 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:38,603 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:38,803 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-11-22 01:54:38,803 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:38,803 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:38,803 INFO L85 PathProgramCache]: Analyzing trace with hash -1116540982, now seen corresponding path program 3 times [2022-11-22 01:54:38,803 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:38,803 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1496170831] [2022-11-22 01:54:38,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:38,804 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:38,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:39,222 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:39,222 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:39,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1496170831] [2022-11-22 01:54:39,222 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1496170831] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:39,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [426594422] [2022-11-22 01:54:39,223 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:54:39,223 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:39,223 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:39,224 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:39,242 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-22 01:54:39,326 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:54:39,326 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:54:39,328 INFO L263 TraceCheckSpWp]: Trace formula consists of 144 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-22 01:54:39,329 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:39,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:54:39,679 INFO L321 Elim1Store]: treesize reduction 9, result has 47.1 percent of original size [2022-11-22 01:54:39,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 18 [2022-11-22 01:54:39,703 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:39,704 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:39,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-11-22 01:54:39,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-11-22 01:54:40,184 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:40,184 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [426594422] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:40,184 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1360180694] [2022-11-22 01:54:40,186 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:54:40,186 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:40,186 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:40,187 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:40,187 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:40,242 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:40,245 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:40,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:40,312 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:40,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:40,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:40,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:40,522 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:54:40,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:54:40,614 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:42,161 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2211#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:42,161 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:42,162 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:42,162 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 12, 12] total 30 [2022-11-22 01:54:42,162 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1641843509] [2022-11-22 01:54:42,162 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:42,162 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-22 01:54:42,163 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:42,163 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-22 01:54:42,164 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=135, Invalid=1347, Unknown=0, NotChecked=0, Total=1482 [2022-11-22 01:54:42,164 INFO L87 Difference]: Start difference. First operand 54 states and 65 transitions. Second operand has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:45,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:45,221 INFO L93 Difference]: Finished difference Result 150 states and 172 transitions. [2022-11-22 01:54:45,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-22 01:54:45,222 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-22 01:54:45,222 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:45,223 INFO L225 Difference]: With dead ends: 150 [2022-11-22 01:54:45,223 INFO L226 Difference]: Without dead ends: 150 [2022-11-22 01:54:45,225 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 696 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=609, Invalid=3423, Unknown=0, NotChecked=0, Total=4032 [2022-11-22 01:54:45,225 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 725 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 708 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 725 SdHoareTripleChecker+Valid, 168 SdHoareTripleChecker+Invalid, 723 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 708 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:45,226 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [725 Valid, 168 Invalid, 723 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 708 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-22 01:54:45,226 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-11-22 01:54:45,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 74. [2022-11-22 01:54:45,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 70 states have (on average 1.2857142857142858) internal successors, (90), 73 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:45,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 90 transitions. [2022-11-22 01:54:45,229 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 90 transitions. Word has length 15 [2022-11-22 01:54:45,230 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:45,230 INFO L495 AbstractCegarLoop]: Abstraction has 74 states and 90 transitions. [2022-11-22 01:54:45,230 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:45,230 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 90 transitions. [2022-11-22 01:54:45,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-22 01:54:45,231 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:45,231 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:45,242 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:45,436 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:45,436 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:45,437 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:45,437 INFO L85 PathProgramCache]: Analyzing trace with hash 745895037, now seen corresponding path program 1 times [2022-11-22 01:54:45,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:45,437 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [22416716] [2022-11-22 01:54:45,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:45,437 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:45,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:45,665 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:54:45,665 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:45,665 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [22416716] [2022-11-22 01:54:45,665 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [22416716] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:45,665 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [732739029] [2022-11-22 01:54:45,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:45,666 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:45,666 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:45,667 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:45,680 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-22 01:54:45,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:45,772 INFO L263 TraceCheckSpWp]: Trace formula consists of 163 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-22 01:54:45,773 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:45,862 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:45,862 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:45,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-22 01:54:46,028 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:46,028 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [732739029] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:46,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1269684633] [2022-11-22 01:54:46,029 INFO L159 IcfgInterpreter]: Started Sifa with 13 locations of interest [2022-11-22 01:54:46,030 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:46,030 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:46,030 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:46,030 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:46,077 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:46,079 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:46,080 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:46,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:46,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:46,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:46,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:46,346 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:54:46,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:54:46,462 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:48,132 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1269684633] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:48,132 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:48,132 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [7, 8, 8] total 28 [2022-11-22 01:54:48,133 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1365120650] [2022-11-22 01:54:48,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:48,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-22 01:54:48,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:48,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-22 01:54:48,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=115, Invalid=697, Unknown=0, NotChecked=0, Total=812 [2022-11-22 01:54:48,134 INFO L87 Difference]: Start difference. First operand 74 states and 90 transitions. Second operand has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:51,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:51,829 INFO L93 Difference]: Finished difference Result 79 states and 92 transitions. [2022-11-22 01:54:51,830 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-22 01:54:51,830 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-22 01:54:51,830 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:51,830 INFO L225 Difference]: With dead ends: 79 [2022-11-22 01:54:51,830 INFO L226 Difference]: Without dead ends: 79 [2022-11-22 01:54:51,831 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 27 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 5.1s TimeCoverageRelationStatistics Valid=253, Invalid=1153, Unknown=0, NotChecked=0, Total=1406 [2022-11-22 01:54:51,832 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 47 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 215 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 216 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 215 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:51,832 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 58 Invalid, 216 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 215 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-22 01:54:51,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-11-22 01:54:51,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 75. [2022-11-22 01:54:51,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 71 states have (on average 1.2816901408450705) internal successors, (91), 74 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:51,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 91 transitions. [2022-11-22 01:54:51,835 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 91 transitions. Word has length 17 [2022-11-22 01:54:51,835 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:51,835 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 91 transitions. [2022-11-22 01:54:51,836 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:51,836 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 91 transitions. [2022-11-22 01:54:51,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-22 01:54:51,836 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:51,837 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:51,843 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:52,042 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:52,042 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:52,043 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:52,043 INFO L85 PathProgramCache]: Analyzing trace with hash 771518764, now seen corresponding path program 1 times [2022-11-22 01:54:52,043 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:52,043 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [736511453] [2022-11-22 01:54:52,043 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:52,043 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:52,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:52,189 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 01:54:52,189 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:52,189 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [736511453] [2022-11-22 01:54:52,190 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [736511453] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:52,190 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1643723753] [2022-11-22 01:54:52,190 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:52,190 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:52,190 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:52,191 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:52,195 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-22 01:54:52,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:52,290 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-22 01:54:52,291 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:52,396 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 01:54:52,396 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:52,515 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 01:54:52,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1643723753] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:52,515 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1169049397] [2022-11-22 01:54:52,517 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:54:52,517 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:52,517 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:52,517 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:52,517 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:52,556 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:52,559 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:52,560 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:52,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:52,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:52,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:52,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:52,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:52,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:52,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:52,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:53,008 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:54:53,008 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:54:53,155 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:53,209 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 01:54:53,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 01:54:53,357 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:54:53,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:54:53,473 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:54:53,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:54:53,535 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:56,365 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2911#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:56,365 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:56,365 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:56,365 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 18 [2022-11-22 01:54:56,365 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [815906319] [2022-11-22 01:54:56,365 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:56,366 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-22 01:54:56,366 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:56,366 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-22 01:54:56,366 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=844, Unknown=0, NotChecked=0, Total=992 [2022-11-22 01:54:56,367 INFO L87 Difference]: Start difference. First operand 75 states and 91 transitions. Second operand has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:56,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:56,676 INFO L93 Difference]: Finished difference Result 77 states and 89 transitions. [2022-11-22 01:54:56,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-22 01:54:56,678 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-22 01:54:56,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:56,678 INFO L225 Difference]: With dead ends: 77 [2022-11-22 01:54:56,678 INFO L226 Difference]: Without dead ends: 75 [2022-11-22 01:54:56,679 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 424 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=225, Invalid=1257, Unknown=0, NotChecked=0, Total=1482 [2022-11-22 01:54:56,680 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 96 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 162 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 211 SdHoareTripleChecker+Invalid, 170 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 162 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:56,680 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 211 Invalid, 170 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 162 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:54:56,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-22 01:54:56,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 71. [2022-11-22 01:54:56,683 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 67 states have (on average 1.2835820895522387) internal successors, (86), 70 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:56,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 86 transitions. [2022-11-22 01:54:56,684 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 86 transitions. Word has length 18 [2022-11-22 01:54:56,684 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:56,684 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 86 transitions. [2022-11-22 01:54:56,684 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:56,684 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 86 transitions. [2022-11-22 01:54:56,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-22 01:54:56,685 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:56,685 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:54:56,691 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:56,890 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:56,891 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:54:56,891 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:56,891 INFO L85 PathProgramCache]: Analyzing trace with hash 1599574128, now seen corresponding path program 1 times [2022-11-22 01:54:56,891 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:56,891 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [514980144] [2022-11-22 01:54:56,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:56,892 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:56,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:57,160 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:54:57,160 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:57,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [514980144] [2022-11-22 01:54:57,161 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [514980144] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:57,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1675287440] [2022-11-22 01:54:57,161 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:57,161 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:57,161 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:57,163 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:57,185 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-22 01:54:57,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:57,267 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-22 01:54:57,268 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:57,284 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:54:57,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:54:57,375 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:54:57,375 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:57,544 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:54:57,545 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1675287440] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:57,545 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1392803581] [2022-11-22 01:54:57,546 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 01:54:57,546 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:57,547 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:57,547 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:57,547 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:57,587 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:57,589 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:57,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:57,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:57,695 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:57,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:57,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:57,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:57,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:57,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:57,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:58,015 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:54:58,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:54:58,116 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:59,809 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1392803581] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:54:59,809 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:59,810 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [8, 8, 8] total 32 [2022-11-22 01:54:59,810 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1133162302] [2022-11-22 01:54:59,810 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:54:59,810 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-22 01:54:59,810 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:59,811 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-22 01:54:59,811 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=886, Unknown=0, NotChecked=0, Total=1056 [2022-11-22 01:54:59,812 INFO L87 Difference]: Start difference. First operand 71 states and 86 transitions. Second operand has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:01,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:01,680 INFO L93 Difference]: Finished difference Result 72 states and 87 transitions. [2022-11-22 01:55:01,680 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-22 01:55:01,680 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-22 01:55:01,680 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:01,681 INFO L225 Difference]: With dead ends: 72 [2022-11-22 01:55:01,681 INFO L226 Difference]: Without dead ends: 72 [2022-11-22 01:55:01,682 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 383 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=245, Invalid=1161, Unknown=0, NotChecked=0, Total=1406 [2022-11-22 01:55:01,682 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 26 mSDsluCounter, 26 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 31 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:01,683 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 31 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:55:01,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2022-11-22 01:55:01,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 69. [2022-11-22 01:55:01,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 65 states have (on average 1.2923076923076924) internal successors, (84), 68 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:01,685 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 84 transitions. [2022-11-22 01:55:01,685 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 84 transitions. Word has length 19 [2022-11-22 01:55:01,686 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:01,686 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 84 transitions. [2022-11-22 01:55:01,686 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:01,686 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 84 transitions. [2022-11-22 01:55:01,686 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-22 01:55:01,687 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:01,687 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:55:01,696 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:01,896 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2022-11-22 01:55:01,897 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:55:01,897 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:01,897 INFO L85 PathProgramCache]: Analyzing trace with hash -657256320, now seen corresponding path program 4 times [2022-11-22 01:55:01,897 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:01,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1637498060] [2022-11-22 01:55:01,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:01,898 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:01,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:02,377 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:02,377 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:02,378 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1637498060] [2022-11-22 01:55:02,378 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1637498060] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:02,378 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [902044560] [2022-11-22 01:55:02,378 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:55:02,378 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:02,378 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:02,379 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:02,381 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-22 01:55:02,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:02,475 INFO L263 TraceCheckSpWp]: Trace formula consists of 168 conjuncts, 50 conjunts are in the unsatisfiable core [2022-11-22 01:55:02,477 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:02,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:55:03,137 INFO L321 Elim1Store]: treesize reduction 13, result has 48.0 percent of original size [2022-11-22 01:55:03,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 33 treesize of output 26 [2022-11-22 01:55:03,179 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 3 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:03,180 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:03,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-22 01:55:03,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 34 [2022-11-22 01:55:03,907 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 9 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:03,908 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [902044560] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:03,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [439198720] [2022-11-22 01:55:03,909 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:55:03,909 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:03,909 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:03,909 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:03,909 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:03,953 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:03,956 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:03,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:04,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:55:04,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:04,107 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:04,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:04,229 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:55:04,230 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:55:04,314 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:05,976 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3526#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:05,976 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:05,977 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:05,977 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 15, 15] total 39 [2022-11-22 01:55:05,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1687531194] [2022-11-22 01:55:05,977 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:05,977 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-11-22 01:55:05,977 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:05,978 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-11-22 01:55:05,978 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=198, Invalid=2058, Unknown=0, NotChecked=0, Total=2256 [2022-11-22 01:55:05,979 INFO L87 Difference]: Start difference. First operand 69 states and 84 transitions. Second operand has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:10,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:10,721 INFO L93 Difference]: Finished difference Result 220 states and 252 transitions. [2022-11-22 01:55:10,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-11-22 01:55:10,722 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-22 01:55:10,722 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:10,723 INFO L225 Difference]: With dead ends: 220 [2022-11-22 01:55:10,723 INFO L226 Difference]: Without dead ends: 220 [2022-11-22 01:55:10,725 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 20 SyntacticMatches, 1 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1303 ImplicationChecksByTransitivity, 6.7s TimeCoverageRelationStatistics Valid=985, Invalid=5657, Unknown=0, NotChecked=0, Total=6642 [2022-11-22 01:55:10,726 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 1229 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 936 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1229 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 962 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 936 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:10,726 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1229 Valid, 208 Invalid, 962 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 936 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-22 01:55:10,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2022-11-22 01:55:10,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 87. [2022-11-22 01:55:10,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 83 states have (on average 1.3012048192771084) internal successors, (108), 86 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:10,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 108 transitions. [2022-11-22 01:55:10,730 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 108 transitions. Word has length 19 [2022-11-22 01:55:10,730 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:10,731 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 108 transitions. [2022-11-22 01:55:10,731 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:10,731 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 108 transitions. [2022-11-22 01:55:10,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-22 01:55:10,732 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:10,732 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:55:10,738 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:10,937 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-22 01:55:10,938 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:55:10,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:10,938 INFO L85 PathProgramCache]: Analyzing trace with hash 977322351, now seen corresponding path program 2 times [2022-11-22 01:55:10,938 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:10,938 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1719494895] [2022-11-22 01:55:10,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:10,939 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:10,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:11,189 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:55:11,189 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:11,189 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1719494895] [2022-11-22 01:55:11,189 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1719494895] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:11,190 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [148041447] [2022-11-22 01:55:11,190 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:55:11,190 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:11,190 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:11,191 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:11,210 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-22 01:55:11,304 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-22 01:55:11,304 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:55:11,306 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-22 01:55:11,307 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:11,403 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:55:11,403 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:11,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 01:55:11,585 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:55:11,586 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [148041447] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:11,586 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1606941408] [2022-11-22 01:55:11,587 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:55:11,587 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:11,588 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:11,588 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:11,588 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:11,626 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:11,628 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:11,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:11,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:11,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:11,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:11,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:11,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:11,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:11,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:11,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:12,013 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:55:12,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:55:12,110 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:12,162 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 01:55:12,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 01:55:12,271 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:12,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:12,401 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:12,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:12,456 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:15,543 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4044#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:15,543 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:15,544 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:15,544 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8, 8] total 19 [2022-11-22 01:55:15,544 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496475611] [2022-11-22 01:55:15,544 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:15,544 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-22 01:55:15,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:15,545 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-22 01:55:15,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=145, Invalid=977, Unknown=0, NotChecked=0, Total=1122 [2022-11-22 01:55:15,545 INFO L87 Difference]: Start difference. First operand 87 states and 108 transitions. Second operand has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:15,918 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:15,918 INFO L93 Difference]: Finished difference Result 100 states and 119 transitions. [2022-11-22 01:55:15,918 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-22 01:55:15,919 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-22 01:55:15,919 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:15,921 INFO L225 Difference]: With dead ends: 100 [2022-11-22 01:55:15,921 INFO L226 Difference]: Without dead ends: 100 [2022-11-22 01:55:15,921 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 33 SyntacticMatches, 2 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 410 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=235, Invalid=1487, Unknown=0, NotChecked=0, Total=1722 [2022-11-22 01:55:15,922 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 209 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 101 SdHoareTripleChecker+Invalid, 316 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:15,922 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 101 Invalid, 316 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:55:15,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-11-22 01:55:15,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 90. [2022-11-22 01:55:15,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 86 states have (on average 1.302325581395349) internal successors, (112), 89 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:15,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 112 transitions. [2022-11-22 01:55:15,927 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 112 transitions. Word has length 20 [2022-11-22 01:55:15,927 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:15,927 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 112 transitions. [2022-11-22 01:55:15,927 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:15,927 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 112 transitions. [2022-11-22 01:55:15,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-22 01:55:15,928 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:15,928 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:55:15,937 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:16,134 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:16,134 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:55:16,134 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:16,134 INFO L85 PathProgramCache]: Analyzing trace with hash 977321313, now seen corresponding path program 1 times [2022-11-22 01:55:16,135 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:16,135 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1383732764] [2022-11-22 01:55:16,135 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:16,135 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:16,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:16,270 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-22 01:55:16,270 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:16,270 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1383732764] [2022-11-22 01:55:16,271 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1383732764] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:55:16,271 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:55:16,271 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 01:55:16,271 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1526861265] [2022-11-22 01:55:16,271 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:55:16,272 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 01:55:16,272 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:16,272 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 01:55:16,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:55:16,272 INFO L87 Difference]: Start difference. First operand 90 states and 112 transitions. Second operand has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:16,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:16,297 INFO L93 Difference]: Finished difference Result 89 states and 111 transitions. [2022-11-22 01:55:16,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:55:16,298 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-22 01:55:16,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:16,299 INFO L225 Difference]: With dead ends: 89 [2022-11-22 01:55:16,299 INFO L226 Difference]: Without dead ends: 87 [2022-11-22 01:55:16,299 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:55:16,300 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 5 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:16,301 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 20 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:55:16,301 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-11-22 01:55:16,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 83. [2022-11-22 01:55:16,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 80 states have (on average 1.275) internal successors, (102), 82 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:16,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 102 transitions. [2022-11-22 01:55:16,304 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 102 transitions. Word has length 20 [2022-11-22 01:55:16,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:16,305 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 102 transitions. [2022-11-22 01:55:16,306 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:16,306 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 102 transitions. [2022-11-22 01:55:16,306 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-22 01:55:16,307 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:16,307 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:55:16,307 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24 [2022-11-22 01:55:16,307 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:55:16,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:16,308 INFO L85 PathProgramCache]: Analyzing trace with hash -1201705847, now seen corresponding path program 1 times [2022-11-22 01:55:16,308 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:16,308 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [581942361] [2022-11-22 01:55:16,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:16,308 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:16,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:16,609 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-22 01:55:16,610 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:16,610 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [581942361] [2022-11-22 01:55:16,610 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [581942361] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:55:16,610 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:55:16,610 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-22 01:55:16,610 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [27733604] [2022-11-22 01:55:16,611 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:55:16,611 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-22 01:55:16,611 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:16,612 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-22 01:55:16,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-11-22 01:55:16,612 INFO L87 Difference]: Start difference. First operand 83 states and 102 transitions. Second operand has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:16,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:16,815 INFO L93 Difference]: Finished difference Result 86 states and 103 transitions. [2022-11-22 01:55:16,815 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-22 01:55:16,815 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-22 01:55:16,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:16,816 INFO L225 Difference]: With dead ends: 86 [2022-11-22 01:55:16,816 INFO L226 Difference]: Without dead ends: 70 [2022-11-22 01:55:16,816 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2022-11-22 01:55:16,817 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 22 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 22 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:16,817 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [22 Valid, 66 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:55:16,817 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-22 01:55:16,818 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 68. [2022-11-22 01:55:16,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 65 states have (on average 1.2461538461538462) internal successors, (81), 67 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:16,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 81 transitions. [2022-11-22 01:55:16,819 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 81 transitions. Word has length 20 [2022-11-22 01:55:16,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:16,819 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 81 transitions. [2022-11-22 01:55:16,819 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:16,820 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 81 transitions. [2022-11-22 01:55:16,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-22 01:55:16,820 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:16,820 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:55:16,820 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable25 [2022-11-22 01:55:16,820 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:55:16,820 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:16,821 INFO L85 PathProgramCache]: Analyzing trace with hash 232221839, now seen corresponding path program 1 times [2022-11-22 01:55:16,821 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:16,821 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1226296528] [2022-11-22 01:55:16,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:16,821 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:16,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:17,144 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:55:17,144 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:17,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1226296528] [2022-11-22 01:55:17,144 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1226296528] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:17,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1861936787] [2022-11-22 01:55:17,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:17,144 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:17,145 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:17,146 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:17,178 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-22 01:55:17,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:17,274 INFO L263 TraceCheckSpWp]: Trace formula consists of 196 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-22 01:55:17,275 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:17,287 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:55:17,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:55:17,395 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:55:17,395 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:17,583 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:55:17,583 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1861936787] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:17,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [72137414] [2022-11-22 01:55:17,584 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:55:17,585 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:17,585 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:17,585 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:17,585 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:17,630 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:17,632 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:17,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:17,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:55:17,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:17,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:17,812 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:17,866 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:17,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:17,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:17,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:18,028 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:55:18,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:55:18,138 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:18,190 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 01:55:18,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 01:55:18,327 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:18,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:18,436 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:18,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:18,491 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:21,384 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4753#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:21,384 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:21,384 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:21,384 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 8] total 22 [2022-11-22 01:55:21,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1357596688] [2022-11-22 01:55:21,384 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:21,385 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-22 01:55:21,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:21,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-22 01:55:21,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=1145, Unknown=0, NotChecked=0, Total=1332 [2022-11-22 01:55:21,386 INFO L87 Difference]: Start difference. First operand 68 states and 81 transitions. Second operand has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:21,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:21,775 INFO L93 Difference]: Finished difference Result 84 states and 98 transitions. [2022-11-22 01:55:21,775 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-22 01:55:21,776 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-11-22 01:55:21,776 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:21,776 INFO L225 Difference]: With dead ends: 84 [2022-11-22 01:55:21,776 INFO L226 Difference]: Without dead ends: 84 [2022-11-22 01:55:21,777 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 517 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=302, Invalid=1590, Unknown=0, NotChecked=0, Total=1892 [2022-11-22 01:55:21,777 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 104 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 270 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 280 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 270 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:21,778 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 41 Invalid, 280 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 270 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:55:21,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-11-22 01:55:21,780 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 77. [2022-11-22 01:55:21,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 74 states have (on average 1.2297297297297298) internal successors, (91), 76 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:21,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 91 transitions. [2022-11-22 01:55:21,781 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 91 transitions. Word has length 21 [2022-11-22 01:55:21,781 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:21,781 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 91 transitions. [2022-11-22 01:55:21,781 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:21,781 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 91 transitions. [2022-11-22 01:55:21,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-22 01:55:21,782 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:21,782 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:55:21,788 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:21,987 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-22 01:55:21,988 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:55:21,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:21,988 INFO L85 PathProgramCache]: Analyzing trace with hash -817164504, now seen corresponding path program 1 times [2022-11-22 01:55:21,988 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:21,988 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1223342651] [2022-11-22 01:55:21,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:21,988 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:22,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:22,721 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:22,722 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:22,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1223342651] [2022-11-22 01:55:22,722 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1223342651] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:22,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1219214481] [2022-11-22 01:55:22,722 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:22,722 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:22,722 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:22,723 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:22,746 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-22 01:55:22,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:22,851 INFO L263 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 31 conjunts are in the unsatisfiable core [2022-11-22 01:55:22,856 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:23,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:23,082 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:23,084 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:23,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 01:55:23,106 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-22 01:55:23,107 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:23,137 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 01:55:23,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-22 01:55:23,380 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 3 proven. 4 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-22 01:55:23,380 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1219214481] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:23,381 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1573836321] [2022-11-22 01:55:23,382 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:55:23,382 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:23,383 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:23,383 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:23,383 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:23,423 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:23,427 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:23,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:23,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:55:23,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:23,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:23,598 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:23,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:23,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:23,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:23,779 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:23,832 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:55:23,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:55:23,968 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:55:23,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:55:24,062 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:24,062 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:24,171 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:24,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:24,231 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:27,260 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5102#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:27,260 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:27,260 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:27,261 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10, 10] total 28 [2022-11-22 01:55:27,261 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1939742369] [2022-11-22 01:55:27,261 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:27,261 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-22 01:55:27,261 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:27,262 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-22 01:55:27,262 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=1552, Unknown=0, NotChecked=0, Total=1722 [2022-11-22 01:55:27,263 INFO L87 Difference]: Start difference. First operand 77 states and 91 transitions. Second operand has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:29,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:29,206 INFO L93 Difference]: Finished difference Result 98 states and 110 transitions. [2022-11-22 01:55:29,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-22 01:55:29,206 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-11-22 01:55:29,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:29,209 INFO L225 Difference]: With dead ends: 98 [2022-11-22 01:55:29,209 INFO L226 Difference]: Without dead ends: 98 [2022-11-22 01:55:29,210 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 94 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 669 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=418, Invalid=2774, Unknown=0, NotChecked=0, Total=3192 [2022-11-22 01:55:29,211 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 302 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 438 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 302 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 453 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 438 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:29,219 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [302 Valid, 62 Invalid, 453 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 438 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-22 01:55:29,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-11-22 01:55:29,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 87. [2022-11-22 01:55:29,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 84 states have (on average 1.2023809523809523) internal successors, (101), 86 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:29,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 101 transitions. [2022-11-22 01:55:29,223 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 101 transitions. Word has length 23 [2022-11-22 01:55:29,223 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:29,224 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 101 transitions. [2022-11-22 01:55:29,224 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:29,224 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 101 transitions. [2022-11-22 01:55:29,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-22 01:55:29,225 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:29,225 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:55:29,235 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:29,430 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-22 01:55:29,431 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:55:29,431 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:29,431 INFO L85 PathProgramCache]: Analyzing trace with hash -534502090, now seen corresponding path program 5 times [2022-11-22 01:55:29,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:29,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260891743] [2022-11-22 01:55:29,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:29,431 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:29,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:30,012 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:30,013 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:30,013 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260891743] [2022-11-22 01:55:30,013 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [260891743] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:30,013 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1254943701] [2022-11-22 01:55:30,013 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:55:30,013 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:30,013 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:30,015 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:30,047 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-22 01:55:30,235 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 01:55:30,235 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:55:30,237 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-22 01:55:30,239 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:30,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:55:31,005 INFO L321 Elim1Store]: treesize reduction 17, result has 48.5 percent of original size [2022-11-22 01:55:31,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 41 treesize of output 34 [2022-11-22 01:55:31,039 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:31,039 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:31,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 51 [2022-11-22 01:55:31,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 45 [2022-11-22 01:55:32,049 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 16 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:32,049 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1254943701] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:32,049 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [511708055] [2022-11-22 01:55:32,050 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:55:32,050 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:32,051 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:32,051 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:32,051 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:32,096 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:32,098 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:32,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:32,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:32,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:32,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:32,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:32,321 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:55:32,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:55:32,398 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:34,108 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5509#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:34,108 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:34,109 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:34,109 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 18, 18] total 46 [2022-11-22 01:55:34,109 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [51280665] [2022-11-22 01:55:34,109 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:34,109 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-11-22 01:55:34,110 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:34,110 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-11-22 01:55:34,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=234, Invalid=2736, Unknown=0, NotChecked=0, Total=2970 [2022-11-22 01:55:34,112 INFO L87 Difference]: Start difference. First operand 87 states and 101 transitions. Second operand has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:40,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:40,189 INFO L93 Difference]: Finished difference Result 223 states and 243 transitions. [2022-11-22 01:55:40,191 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-11-22 01:55:40,191 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-11-22 01:55:40,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:40,192 INFO L225 Difference]: With dead ends: 223 [2022-11-22 01:55:40,192 INFO L226 Difference]: Without dead ends: 213 [2022-11-22 01:55:40,195 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2237 ImplicationChecksByTransitivity, 7.9s TimeCoverageRelationStatistics Valid=1421, Invalid=9085, Unknown=0, NotChecked=0, Total=10506 [2022-11-22 01:55:40,195 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 957 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 1863 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 957 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 1902 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 1863 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:40,196 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [957 Valid, 206 Invalid, 1902 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 1863 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-22 01:55:40,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2022-11-22 01:55:40,198 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 101. [2022-11-22 01:55:40,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 98 states have (on average 1.2142857142857142) internal successors, (119), 100 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:40,199 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 119 transitions. [2022-11-22 01:55:40,199 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 119 transitions. Word has length 23 [2022-11-22 01:55:40,200 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:40,200 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 119 transitions. [2022-11-22 01:55:40,200 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:40,200 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 119 transitions. [2022-11-22 01:55:40,201 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-22 01:55:40,201 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:40,201 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:55:40,208 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:40,407 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable28,18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:40,407 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:55:40,407 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:40,408 INFO L85 PathProgramCache]: Analyzing trace with hash -1071471817, now seen corresponding path program 3 times [2022-11-22 01:55:40,408 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:40,408 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [586901686] [2022-11-22 01:55:40,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:40,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:40,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:41,151 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 6 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:55:41,152 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:41,152 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [586901686] [2022-11-22 01:55:41,152 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [586901686] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:41,152 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2041313309] [2022-11-22 01:55:41,152 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:55:41,152 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:41,152 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:41,155 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:41,183 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-22 01:55:41,309 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:55:41,309 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:55:41,311 INFO L263 TraceCheckSpWp]: Trace formula consists of 221 conjuncts, 50 conjunts are in the unsatisfiable core [2022-11-22 01:55:41,313 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:41,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:55:41,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:41,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:55:41,639 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:55:41,759 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 01:55:41,759 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 01:55:41,764 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:55:41,764 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:41,832 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_616 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_616) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-22 01:55:41,841 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_616 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_616) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 01:55:41,864 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_616 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_616) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0)) is different from false [2022-11-22 01:55:41,869 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:41,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:55:41,875 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:41,875 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:55:42,039 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 4 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 3 not checked. [2022-11-22 01:55:42,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2041313309] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:42,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [233220743] [2022-11-22 01:55:42,041 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:55:42,041 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:42,042 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:42,042 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:42,042 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:42,081 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:42,085 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:42,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:42,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:42,177 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:42,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:42,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:55:42,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:42,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:42,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:42,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:42,516 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:55:42,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:55:42,638 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:42,642 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:42,695 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 01:55:42,695 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 01:55:42,823 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:42,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:42,942 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:42,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:43,001 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:46,268 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6108#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:46,268 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:46,269 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:46,269 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 12, 12] total 32 [2022-11-22 01:55:46,269 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [868402963] [2022-11-22 01:55:46,269 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:46,269 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-22 01:55:46,270 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:46,270 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-22 01:55:46,270 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=156, Invalid=1659, Unknown=3, NotChecked=252, Total=2070 [2022-11-22 01:55:46,271 INFO L87 Difference]: Start difference. First operand 101 states and 119 transitions. Second operand has 32 states, 32 states have (on average 1.625) internal successors, (52), 32 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:47,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:47,193 INFO L93 Difference]: Finished difference Result 172 states and 201 transitions. [2022-11-22 01:55:47,193 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-22 01:55:47,194 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.625) internal successors, (52), 32 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-22 01:55:47,194 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:47,194 INFO L225 Difference]: With dead ends: 172 [2022-11-22 01:55:47,194 INFO L226 Difference]: Without dead ends: 152 [2022-11-22 01:55:47,195 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 40 SyntacticMatches, 3 SemanticMatches, 53 ConstructedPredicates, 3 IntricatePredicates, 2 DeprecatedPredicates, 721 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=257, Invalid=2402, Unknown=5, NotChecked=306, Total=2970 [2022-11-22 01:55:47,196 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 100 mSDsluCounter, 139 mSDsCounter, 0 mSdLazyCounter, 338 mSolverCounterSat, 20 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 467 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 338 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 106 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:47,196 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [100 Valid, 148 Invalid, 467 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 338 Invalid, 3 Unknown, 106 Unchecked, 0.3s Time] [2022-11-22 01:55:47,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2022-11-22 01:55:47,199 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 148. [2022-11-22 01:55:47,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 145 states have (on average 1.2206896551724138) internal successors, (177), 147 states have internal predecessors, (177), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:47,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 177 transitions. [2022-11-22 01:55:47,201 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 177 transitions. Word has length 24 [2022-11-22 01:55:47,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:47,201 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 177 transitions. [2022-11-22 01:55:47,201 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.625) internal successors, (52), 32 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:47,201 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 177 transitions. [2022-11-22 01:55:47,202 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-22 01:55:47,202 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:47,202 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:55:47,211 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:47,403 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:47,403 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:55:47,403 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:47,403 INFO L85 PathProgramCache]: Analyzing trace with hash -1014140731, now seen corresponding path program 2 times [2022-11-22 01:55:47,403 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:47,404 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1969994151] [2022-11-22 01:55:47,404 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:47,404 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:47,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:47,723 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 2 proven. 12 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:55:47,723 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:47,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1969994151] [2022-11-22 01:55:47,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1969994151] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:47,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [283922684] [2022-11-22 01:55:47,723 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:55:47,723 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:47,724 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:47,725 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:47,736 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-22 01:55:47,869 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-22 01:55:47,869 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:55:47,871 INFO L263 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 45 conjunts are in the unsatisfiable core [2022-11-22 01:55:47,873 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:47,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:48,053 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:48,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-22 01:55:48,227 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 3 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-22 01:55:48,228 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:48,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 01:55:48,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-22 01:55:48,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 45 treesize of output 37 [2022-11-22 01:55:48,875 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-22 01:55:48,875 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [283922684] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:48,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [344854609] [2022-11-22 01:55:48,877 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:55:48,877 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:48,877 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:48,877 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:48,878 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:48,917 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:48,919 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:48,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:48,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:55:49,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:49,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:49,102 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:49,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:49,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:49,212 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:49,250 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:49,306 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:55:49,306 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:55:49,457 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:55:49,457 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:55:49,538 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:49,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:49,656 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:49,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:49,719 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:52,738 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6634#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:52,738 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:52,739 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:52,739 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 28 [2022-11-22 01:55:52,739 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484251402] [2022-11-22 01:55:52,739 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:52,740 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-22 01:55:52,740 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:52,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-22 01:55:52,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=174, Invalid=1632, Unknown=0, NotChecked=0, Total=1806 [2022-11-22 01:55:52,741 INFO L87 Difference]: Start difference. First operand 148 states and 177 transitions. Second operand has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:55,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:55,195 INFO L93 Difference]: Finished difference Result 191 states and 220 transitions. [2022-11-22 01:55:55,199 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-22 01:55:55,199 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-22 01:55:55,200 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:55,200 INFO L225 Difference]: With dead ends: 191 [2022-11-22 01:55:55,201 INFO L226 Difference]: Without dead ends: 184 [2022-11-22 01:55:55,201 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 73 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1153 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=855, Invalid=4695, Unknown=0, NotChecked=0, Total=5550 [2022-11-22 01:55:55,202 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 401 mSDsluCounter, 49 mSDsCounter, 0 mSdLazyCounter, 620 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 401 SdHoareTripleChecker+Valid, 57 SdHoareTripleChecker+Invalid, 647 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 620 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:55,202 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [401 Valid, 57 Invalid, 647 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 620 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-22 01:55:55,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-11-22 01:55:55,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 152. [2022-11-22 01:55:55,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 149 states have (on average 1.2080536912751678) internal successors, (180), 151 states have internal predecessors, (180), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:55,210 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 180 transitions. [2022-11-22 01:55:55,210 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 180 transitions. Word has length 25 [2022-11-22 01:55:55,210 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:55,211 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 180 transitions. [2022-11-22 01:55:55,211 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:55,211 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 180 transitions. [2022-11-22 01:55:55,211 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-22 01:55:55,212 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:55,212 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:55:55,217 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:55,415 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable30 [2022-11-22 01:55:55,415 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:55:55,415 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:55,415 INFO L85 PathProgramCache]: Analyzing trace with hash 1165606884, now seen corresponding path program 4 times [2022-11-22 01:55:55,415 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:55,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1069855632] [2022-11-22 01:55:55,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:55,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:55,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:55,592 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-22 01:55:55,592 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:55,592 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1069855632] [2022-11-22 01:55:55,592 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1069855632] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:55,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [615123925] [2022-11-22 01:55:55,593 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:55:55,593 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:55,593 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:55,594 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:55,614 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-22 01:55:55,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:55,745 INFO L263 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-22 01:55:55,746 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:55,911 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 7 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-22 01:55:55,911 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:56,093 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-22 01:55:56,093 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [615123925] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:56,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1156296438] [2022-11-22 01:55:56,095 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:55:56,095 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:56,095 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:56,095 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:56,096 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:56,136 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:56,138 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:56,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:56,178 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:56,230 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:56,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:56,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:56,359 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:56,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:56,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:56,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:56,521 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:55:56,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:55:56,617 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:56,669 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 01:55:56,669 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 01:55:56,775 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:56,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:56,884 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:56,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:56,951 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:59,844 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7228#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:59,844 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:59,844 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:59,844 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 23 [2022-11-22 01:55:59,844 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [346928962] [2022-11-22 01:55:59,844 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:59,844 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-22 01:55:59,845 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:59,845 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-22 01:55:59,845 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=189, Invalid=1143, Unknown=0, NotChecked=0, Total=1332 [2022-11-22 01:55:59,845 INFO L87 Difference]: Start difference. First operand 152 states and 180 transitions. Second operand has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:00,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:56:00,264 INFO L93 Difference]: Finished difference Result 153 states and 177 transitions. [2022-11-22 01:56:00,267 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-22 01:56:00,268 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-11-22 01:56:00,268 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:56:00,268 INFO L225 Difference]: With dead ends: 153 [2022-11-22 01:56:00,269 INFO L226 Difference]: Without dead ends: 151 [2022-11-22 01:56:00,269 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 95 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 631 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=330, Invalid=1832, Unknown=0, NotChecked=0, Total=2162 [2022-11-22 01:56:00,270 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 157 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 91 SdHoareTripleChecker+Invalid, 165 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:56:00,270 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [157 Valid, 91 Invalid, 165 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:56:00,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-11-22 01:56:00,273 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 148. [2022-11-22 01:56:00,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 145 states have (on average 1.206896551724138) internal successors, (175), 147 states have internal predecessors, (175), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:00,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 175 transitions. [2022-11-22 01:56:00,274 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 175 transitions. Word has length 26 [2022-11-22 01:56:00,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:56:00,274 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 175 transitions. [2022-11-22 01:56:00,275 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:00,275 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 175 transitions. [2022-11-22 01:56:00,275 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-22 01:56:00,275 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:56:00,276 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:56:00,287 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-22 01:56:00,481 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:00,481 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:56:00,482 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:56:00,482 INFO L85 PathProgramCache]: Analyzing trace with hash -275718690, now seen corresponding path program 3 times [2022-11-22 01:56:00,482 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:56:00,482 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1183384493] [2022-11-22 01:56:00,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:56:00,482 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:56:00,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:56:01,041 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:56:01,041 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:56:01,041 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1183384493] [2022-11-22 01:56:01,041 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1183384493] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:56:01,041 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [884644626] [2022-11-22 01:56:01,041 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:56:01,042 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:01,042 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:56:01,043 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:56:01,062 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-22 01:56:01,196 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:56:01,197 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:56:01,199 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-22 01:56:01,201 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:56:01,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:56:01,677 INFO L321 Elim1Store]: treesize reduction 9, result has 47.1 percent of original size [2022-11-22 01:56:01,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 18 [2022-11-22 01:56:01,709 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 4 proven. 12 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-22 01:56:01,709 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:56:01,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-11-22 01:56:01,845 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-11-22 01:56:02,220 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 9 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-22 01:56:02,220 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [884644626] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:56:02,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1343582381] [2022-11-22 01:56:02,221 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:56:02,222 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:56:02,222 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:56:02,222 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:56:02,222 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:56:02,263 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:02,265 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:02,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:56:02,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:02,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:02,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:02,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:56:02,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:02,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:02,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:02,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:02,633 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:56:02,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:56:02,769 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:56:02,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:56:02,860 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:56:02,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:56:02,952 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:56:02,952 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:56:03,009 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:56:06,125 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7755#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:56:06,126 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:56:06,126 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:56:06,126 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13, 13] total 36 [2022-11-22 01:56:06,126 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2128666979] [2022-11-22 01:56:06,126 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:56:06,126 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-22 01:56:06,126 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:56:06,127 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-22 01:56:06,127 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=189, Invalid=2261, Unknown=0, NotChecked=0, Total=2450 [2022-11-22 01:56:06,127 INFO L87 Difference]: Start difference. First operand 148 states and 175 transitions. Second operand has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:10,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:56:10,679 INFO L93 Difference]: Finished difference Result 207 states and 229 transitions. [2022-11-22 01:56:10,679 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-11-22 01:56:10,679 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-22 01:56:10,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:56:10,680 INFO L225 Difference]: With dead ends: 207 [2022-11-22 01:56:10,680 INFO L226 Difference]: Without dead ends: 194 [2022-11-22 01:56:10,681 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 86 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1646 ImplicationChecksByTransitivity, 7.9s TimeCoverageRelationStatistics Valid=1005, Invalid=6651, Unknown=0, NotChecked=0, Total=7656 [2022-11-22 01:56:10,682 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 748 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 823 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 748 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 839 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 823 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 01:56:10,682 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [748 Valid, 89 Invalid, 839 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 823 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-22 01:56:10,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 194 states. [2022-11-22 01:56:10,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 194 to 152. [2022-11-22 01:56:10,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 149 states have (on average 1.1812080536912752) internal successors, (176), 151 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:10,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 176 transitions. [2022-11-22 01:56:10,686 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 176 transitions. Word has length 27 [2022-11-22 01:56:10,687 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:56:10,687 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 176 transitions. [2022-11-22 01:56:10,687 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:10,687 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 176 transitions. [2022-11-22 01:56:10,688 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-22 01:56:10,688 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:56:10,688 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:56:10,699 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-22 01:56:10,894 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:10,894 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:56:10,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:56:10,895 INFO L85 PathProgramCache]: Analyzing trace with hash -71799316, now seen corresponding path program 6 times [2022-11-22 01:56:10,895 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:56:10,895 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1520609678] [2022-11-22 01:56:10,895 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:56:10,895 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:56:10,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:56:11,563 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:11,563 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:56:11,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1520609678] [2022-11-22 01:56:11,564 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1520609678] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:56:11,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [344368451] [2022-11-22 01:56:11,564 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:56:11,564 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:11,564 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:56:11,565 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:56:11,567 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-22 01:56:11,703 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:56:11,703 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:56:11,706 INFO L263 TraceCheckSpWp]: Trace formula consists of 216 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-22 01:56:11,707 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:56:12,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:12,699 INFO L321 Elim1Store]: treesize reduction 21, result has 48.8 percent of original size [2022-11-22 01:56:12,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 58 treesize of output 42 [2022-11-22 01:56:12,735 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 5 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:12,735 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:56:13,230 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 74 treesize of output 64 [2022-11-22 01:56:13,240 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 74 treesize of output 56 [2022-11-22 01:56:14,167 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 25 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:14,167 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [344368451] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:56:14,167 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1950369294] [2022-11-22 01:56:14,169 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:56:14,169 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:56:14,169 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:56:14,169 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:56:14,170 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:56:14,207 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:14,209 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:14,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:56:14,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:14,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:14,333 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:14,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:14,425 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:56:14,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:56:14,498 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:56:16,307 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8414#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:56:16,307 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:56:16,307 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:56:16,307 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 21, 21] total 54 [2022-11-22 01:56:16,307 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1850882438] [2022-11-22 01:56:16,307 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:56:16,307 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-22 01:56:16,308 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:56:16,308 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-22 01:56:16,308 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=304, Invalid=3602, Unknown=0, NotChecked=0, Total=3906 [2022-11-22 01:56:16,309 INFO L87 Difference]: Start difference. First operand 152 states and 176 transitions. Second operand has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:25,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:56:25,767 INFO L93 Difference]: Finished difference Result 383 states and 420 transitions. [2022-11-22 01:56:25,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-11-22 01:56:25,768 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-22 01:56:25,768 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:56:25,769 INFO L225 Difference]: With dead ends: 383 [2022-11-22 01:56:25,769 INFO L226 Difference]: Without dead ends: 371 [2022-11-22 01:56:25,771 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 121 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3431 ImplicationChecksByTransitivity, 11.7s TimeCoverageRelationStatistics Valid=1970, Invalid=13036, Unknown=0, NotChecked=0, Total=15006 [2022-11-22 01:56:25,771 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 1256 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 1772 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1256 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 1821 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 1772 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-22 01:56:25,771 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1256 Valid, 165 Invalid, 1821 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 1772 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-11-22 01:56:25,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 371 states. [2022-11-22 01:56:25,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 371 to 184. [2022-11-22 01:56:25,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 181 states have (on average 1.1988950276243093) internal successors, (217), 183 states have internal predecessors, (217), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:25,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 217 transitions. [2022-11-22 01:56:25,778 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 217 transitions. Word has length 27 [2022-11-22 01:56:25,779 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:56:25,779 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 217 transitions. [2022-11-22 01:56:25,779 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:25,779 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 217 transitions. [2022-11-22 01:56:25,780 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-22 01:56:25,780 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:56:25,780 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:56:25,791 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-22 01:56:25,991 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33,23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:25,991 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:56:25,992 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:56:25,992 INFO L85 PathProgramCache]: Analyzing trace with hash -533783897, now seen corresponding path program 5 times [2022-11-22 01:56:25,992 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:56:25,992 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [440624638] [2022-11-22 01:56:25,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:56:25,992 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:56:26,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:56:26,300 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:56:26,301 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:56:26,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [440624638] [2022-11-22 01:56:26,301 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [440624638] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:56:26,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1179556971] [2022-11-22 01:56:26,301 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:56:26,301 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:26,301 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:56:26,303 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:56:26,324 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-22 01:56:26,559 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 01:56:26,559 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:56:26,561 INFO L263 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-22 01:56:26,562 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:56:26,691 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:56:26,692 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:56:26,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 01:56:26,908 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:56:26,908 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1179556971] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:56:26,909 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1855655782] [2022-11-22 01:56:26,910 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:56:26,910 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:56:26,910 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:56:26,911 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:56:26,911 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:56:26,954 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:26,956 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:26,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:56:26,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:56:27,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:27,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:27,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:27,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:27,226 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:27,250 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:27,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:27,347 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:56:27,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:56:27,455 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:27,508 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 01:56:27,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 01:56:27,634 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:56:27,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:56:27,744 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:56:27,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:56:27,802 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:56:30,878 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9295#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:56:30,878 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:56:30,879 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:56:30,879 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-11-22 01:56:30,879 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [377315038] [2022-11-22 01:56:30,879 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:56:30,879 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-22 01:56:30,879 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:56:30,880 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-22 01:56:30,880 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=152, Invalid=1180, Unknown=0, NotChecked=0, Total=1332 [2022-11-22 01:56:30,880 INFO L87 Difference]: Start difference. First operand 184 states and 217 transitions. Second operand has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:31,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:56:31,380 INFO L93 Difference]: Finished difference Result 201 states and 230 transitions. [2022-11-22 01:56:31,380 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-22 01:56:31,380 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-22 01:56:31,381 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:56:31,382 INFO L225 Difference]: With dead ends: 201 [2022-11-22 01:56:31,382 INFO L226 Difference]: Without dead ends: 201 [2022-11-22 01:56:31,382 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 54 SyntacticMatches, 3 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 449 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=294, Invalid=1868, Unknown=0, NotChecked=0, Total=2162 [2022-11-22 01:56:31,383 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 183 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 415 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 422 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 415 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:56:31,383 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [183 Valid, 113 Invalid, 422 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 415 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:56:31,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2022-11-22 01:56:31,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 193. [2022-11-22 01:56:31,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 193 states, 190 states have (on average 1.1894736842105262) internal successors, (226), 192 states have internal predecessors, (226), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:31,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 226 transitions. [2022-11-22 01:56:31,389 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 226 transitions. Word has length 28 [2022-11-22 01:56:31,389 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:56:31,389 INFO L495 AbstractCegarLoop]: Abstraction has 193 states and 226 transitions. [2022-11-22 01:56:31,389 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:31,389 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 226 transitions. [2022-11-22 01:56:31,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-22 01:56:31,390 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:56:31,390 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:56:31,398 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-22 01:56:31,596 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-22 01:56:31,596 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:56:31,597 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:56:31,597 INFO L85 PathProgramCache]: Analyzing trace with hash 282419348, now seen corresponding path program 4 times [2022-11-22 01:56:31,597 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:56:31,597 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1138650218] [2022-11-22 01:56:31,597 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:56:31,597 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:56:31,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:56:32,152 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:56:32,152 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:56:32,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1138650218] [2022-11-22 01:56:32,153 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1138650218] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:56:32,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1131501312] [2022-11-22 01:56:32,153 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:56:32,153 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:32,153 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:56:32,155 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:56:32,186 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-22 01:56:32,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:56:32,325 INFO L263 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 45 conjunts are in the unsatisfiable core [2022-11-22 01:56:32,327 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:56:32,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:32,949 INFO L321 Elim1Store]: treesize reduction 17, result has 50.0 percent of original size [2022-11-22 01:56:32,949 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 38 treesize of output 31 [2022-11-22 01:56:32,978 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 6 proven. 23 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-22 01:56:32,978 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:56:33,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-22 01:56:33,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 68 treesize of output 58 [2022-11-22 01:56:33,757 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 13 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-22 01:56:33,757 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1131501312] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:56:33,757 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [730081054] [2022-11-22 01:56:33,759 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:56:33,759 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:56:33,759 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:56:33,759 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:56:33,760 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:56:33,801 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:33,803 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:33,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:56:33,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:56:33,903 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:33,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:33,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:34,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:34,069 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:34,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:34,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:34,196 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:56:34,196 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:56:34,325 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:56:34,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:56:34,400 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:56:34,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:56:34,499 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:56:34,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:56:34,551 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:56:37,792 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9946#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:56:37,793 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:56:37,793 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:56:37,793 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 16, 16] total 43 [2022-11-22 01:56:37,793 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [404064130] [2022-11-22 01:56:37,793 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:56:37,794 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-11-22 01:56:37,794 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:56:37,794 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-11-22 01:56:37,794 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=239, Invalid=2953, Unknown=0, NotChecked=0, Total=3192 [2022-11-22 01:56:37,794 INFO L87 Difference]: Start difference. First operand 193 states and 226 transitions. Second operand has 43 states, 43 states have (on average 1.8372093023255813) internal successors, (79), 43 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:44,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:56:44,128 INFO L93 Difference]: Finished difference Result 306 states and 335 transitions. [2022-11-22 01:56:44,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-11-22 01:56:44,143 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 43 states have (on average 1.8372093023255813) internal successors, (79), 43 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-22 01:56:44,143 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:56:44,144 INFO L225 Difference]: With dead ends: 306 [2022-11-22 01:56:44,144 INFO L226 Difference]: Without dead ends: 291 [2022-11-22 01:56:44,146 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2914 ImplicationChecksByTransitivity, 9.5s TimeCoverageRelationStatistics Valid=1632, Invalid=10578, Unknown=0, NotChecked=0, Total=12210 [2022-11-22 01:56:44,146 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 1307 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 1584 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1307 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 1609 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 1584 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:56:44,147 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1307 Valid, 191 Invalid, 1609 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 1584 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-22 01:56:44,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2022-11-22 01:56:44,153 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 195. [2022-11-22 01:56:44,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 195 states, 192 states have (on average 1.1666666666666667) internal successors, (224), 194 states have internal predecessors, (224), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:44,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 195 states to 195 states and 224 transitions. [2022-11-22 01:56:44,154 INFO L78 Accepts]: Start accepts. Automaton has 195 states and 224 transitions. Word has length 31 [2022-11-22 01:56:44,154 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:56:44,154 INFO L495 AbstractCegarLoop]: Abstraction has 195 states and 224 transitions. [2022-11-22 01:56:44,155 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 43 states have (on average 1.8372093023255813) internal successors, (79), 43 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:44,155 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 224 transitions. [2022-11-22 01:56:44,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-22 01:56:44,156 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:56:44,156 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:56:44,167 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-22 01:56:44,362 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-22 01:56:44,362 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:56:44,362 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:56:44,363 INFO L85 PathProgramCache]: Analyzing trace with hash -1766708574, now seen corresponding path program 7 times [2022-11-22 01:56:44,363 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:56:44,363 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1675160231] [2022-11-22 01:56:44,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:56:44,363 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:56:44,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:56:45,143 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:45,143 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:56:45,146 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1675160231] [2022-11-22 01:56:45,147 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1675160231] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:56:45,147 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [64757942] [2022-11-22 01:56:45,147 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:56:45,147 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:45,147 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:56:45,148 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:56:45,170 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-22 01:56:45,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:56:45,299 INFO L263 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 71 conjunts are in the unsatisfiable core [2022-11-22 01:56:45,301 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:56:45,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:46,611 INFO L321 Elim1Store]: treesize reduction 25, result has 49.0 percent of original size [2022-11-22 01:56:46,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 68 treesize of output 50 [2022-11-22 01:56:46,651 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 6 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:46,651 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:56:47,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 89 treesize of output 77 [2022-11-22 01:56:47,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 15 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 0 case distinctions, treesize of input 89 treesize of output 67 [2022-11-22 01:56:48,615 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-22 01:56:48,617 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 36 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:48,617 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [64757942] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:56:48,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1875284511] [2022-11-22 01:56:48,618 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:56:48,618 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:56:48,619 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:56:48,619 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:56:48,619 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:56:48,652 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:48,654 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:48,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:56:48,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:48,748 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:48,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:48,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:48,864 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:56:48,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:56:48,935 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:56:50,887 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10811#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:56:50,888 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:56:50,888 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:56:50,888 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 24, 24] total 62 [2022-11-22 01:56:50,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1315129435] [2022-11-22 01:56:50,888 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:56:50,889 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-22 01:56:50,889 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:56:50,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-22 01:56:50,890 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=377, Invalid=4593, Unknown=0, NotChecked=0, Total=4970 [2022-11-22 01:56:50,890 INFO L87 Difference]: Start difference. First operand 195 states and 224 transitions. Second operand has 62 states, 62 states have (on average 1.435483870967742) internal successors, (89), 62 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:06,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:57:06,108 INFO L93 Difference]: Finished difference Result 543 states and 592 transitions. [2022-11-22 01:57:06,108 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 82 states. [2022-11-22 01:57:06,108 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 62 states have (on average 1.435483870967742) internal successors, (89), 62 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-22 01:57:06,108 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:57:06,111 INFO L225 Difference]: With dead ends: 543 [2022-11-22 01:57:06,111 INFO L226 Difference]: Without dead ends: 529 [2022-11-22 01:57:06,113 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 149 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5419 ImplicationChecksByTransitivity, 17.3s TimeCoverageRelationStatistics Valid=2815, Invalid=19835, Unknown=0, NotChecked=0, Total=22650 [2022-11-22 01:57:06,113 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 1581 mSDsluCounter, 288 mSDsCounter, 0 mSdLazyCounter, 3214 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1581 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 3276 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 3214 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2022-11-22 01:57:06,114 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1581 Valid, 299 Invalid, 3276 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 3214 Invalid, 0 Unknown, 0 Unchecked, 2.5s Time] [2022-11-22 01:57:06,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529 states. [2022-11-22 01:57:06,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529 to 231. [2022-11-22 01:57:06,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 228 states have (on average 1.1842105263157894) internal successors, (270), 230 states have internal predecessors, (270), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:06,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 270 transitions. [2022-11-22 01:57:06,121 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 270 transitions. Word has length 31 [2022-11-22 01:57:06,122 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:57:06,122 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 270 transitions. [2022-11-22 01:57:06,122 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 62 states have (on average 1.435483870967742) internal successors, (89), 62 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:06,122 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 270 transitions. [2022-11-22 01:57:06,123 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-22 01:57:06,123 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:57:06,123 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:57:06,129 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-22 01:57:06,329 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable36,26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:57:06,329 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:57:06,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:57:06,329 INFO L85 PathProgramCache]: Analyzing trace with hash -1471045521, now seen corresponding path program 6 times [2022-11-22 01:57:06,329 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:57:06,329 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2129246503] [2022-11-22 01:57:06,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:57:06,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:57:06,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:57:07,408 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 6 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:57:07,409 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:57:07,409 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2129246503] [2022-11-22 01:57:07,409 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2129246503] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:57:07,409 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1409571099] [2022-11-22 01:57:07,409 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:57:07,409 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:57:07,409 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:57:07,410 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:57:07,413 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-22 01:57:07,605 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:57:07,605 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:57:07,608 INFO L263 TraceCheckSpWp]: Trace formula consists of 278 conjuncts, 89 conjunts are in the unsatisfiable core [2022-11-22 01:57:07,611 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:57:08,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:08,176 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:57:08,176 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-11-22 01:57:08,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:57:08,618 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-22 01:57:08,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 43 treesize of output 53 [2022-11-22 01:57:08,645 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:57:08,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 7 [2022-11-22 01:57:08,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-11-22 01:57:09,092 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:09,093 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:57:09,094 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:57:09,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-11-22 01:57:09,099 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 6 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:57:09,099 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:57:09,935 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:57:09,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 34 [2022-11-22 01:57:09,947 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:57:09,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 58 treesize of output 57 [2022-11-22 01:57:09,964 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:57:09,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 20 [2022-11-22 01:57:09,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:57:11,078 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 10 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:57:11,079 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1409571099] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:57:11,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1118151848] [2022-11-22 01:57:11,079 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:57:11,079 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:57:11,080 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:57:11,080 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:57:11,080 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:57:11,117 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:11,119 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:11,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:57:11,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:57:11,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:11,218 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:11,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:57:11,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:11,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:11,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:11,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:11,482 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:57:11,482 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:57:11,573 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:57:11,625 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 01:57:11,625 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 01:57:11,737 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:57:11,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:57:11,837 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:57:11,837 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:57:11,904 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:57:15,996 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11998#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:57:15,996 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:57:15,996 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:57:15,996 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 23, 23] total 58 [2022-11-22 01:57:15,996 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134617331] [2022-11-22 01:57:15,996 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:57:15,997 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2022-11-22 01:57:15,997 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:57:15,997 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2022-11-22 01:57:15,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=361, Invalid=4675, Unknown=76, NotChecked=0, Total=5112 [2022-11-22 01:57:15,999 INFO L87 Difference]: Start difference. First operand 231 states and 270 transitions. Second operand has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:20,883 WARN L837 $PredicateComparison]: unable to prove that (let ((.cse6 (= |c_ULTIMATE.start_main_~nondetString1~0#1.base| |c_ULTIMATE.start_main_~nondetString2~0#1.base|)) (.cse0 (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|))) (let ((.cse2 (+ |c_ULTIMATE.start_main_~length3~0#1| |c_ULTIMATE.start_main_~length1~0#1|)) (.cse1 (= |c_ULTIMATE.start_cstrcat_#t~mem6#1| 0)) (.cse5 (forall ((v_ArrVal_966 (Array Int Int)) (v_ArrVal_967 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_966) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_967) |c_ULTIMATE.start_cstrcat_~s2#1.base|) .cse0) 0))) (.cse3 (not .cse6)) (.cse4 (not (<= 1 (+ |c_ULTIMATE.start_main_~length3~0#1| |c_ULTIMATE.start_main_~nondetString2~0#1.offset|))))) (and (= 0 |c_ULTIMATE.start_main_~nondetString2~0#1.offset|) (or (forall ((v_ArrVal_967 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_967) |c_ULTIMATE.start_cstrcat_~s2#1.base|) .cse0) 0)) .cse1) (<= 3 |c_ULTIMATE.start_main_~length1~0#1|) (< 2 |c_ULTIMATE.start_main_~length1~0#1|) (<= .cse2 |c_ULTIMATE.start_main_~length2~0#1|) .cse3 (= |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |c_ULTIMATE.start_main_~i~0#1|) (or (forall ((v_ArrVal_967 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_967) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) .cse4 (forall ((v_ArrVal_965 (Array Int Int))) (or (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_965) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) |c_ULTIMATE.start_main_~nondetString1~0#1.offset|) 0) (not (= (select v_ArrVal_965 |c_ULTIMATE.start_main_~nondetString2~0#1.offset|) 0))))) (not (< |c_ULTIMATE.start_main_~length2~0#1| .cse2)) (or .cse5 .cse1) (<= |c_ULTIMATE.start_main_~i~0#1| 2) (or .cse5 (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post5#1.base|) |c_ULTIMATE.start_cstrcat_#t~post5#1.offset|) 0)) (or (and .cse3 (= |c_ULTIMATE.start_main_~length1~0#1| 1)) (and (= 3 |c_ULTIMATE.start_main_~length1~0#1|) .cse3) .cse4 (and (= |c_ULTIMATE.start_main_~nondetString1~0#1.offset| |c_ULTIMATE.start_main_~nondetString2~0#1.offset|) .cse6))))) is different from false [2022-11-22 01:57:23,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:57:23,569 INFO L93 Difference]: Finished difference Result 388 states and 443 transitions. [2022-11-22 01:57:23,569 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 60 states. [2022-11-22 01:57:23,569 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-11-22 01:57:23,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:57:23,571 INFO L225 Difference]: With dead ends: 388 [2022-11-22 01:57:23,571 INFO L226 Difference]: Without dead ends: 312 [2022-11-22 01:57:23,572 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 122 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 3403 ImplicationChecksByTransitivity, 13.3s TimeCoverageRelationStatistics Valid=1612, Invalid=13314, Unknown=84, NotChecked=242, Total=15252 [2022-11-22 01:57:23,572 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 538 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 1105 mSolverCounterSat, 96 mSolverCounterUnsat, 8 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 244 SdHoareTripleChecker+Invalid, 1210 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 1105 IncrementalHoareTripleChecker+Invalid, 8 IncrementalHoareTripleChecker+Unknown, 1 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:57:23,572 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [538 Valid, 244 Invalid, 1210 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 1105 Invalid, 8 Unknown, 1 Unchecked, 1.1s Time] [2022-11-22 01:57:23,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 312 states. [2022-11-22 01:57:23,577 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 312 to 298. [2022-11-22 01:57:23,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 295 states have (on average 1.1830508474576271) internal successors, (349), 297 states have internal predecessors, (349), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:23,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 349 transitions. [2022-11-22 01:57:23,579 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 349 transitions. Word has length 32 [2022-11-22 01:57:23,579 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:57:23,579 INFO L495 AbstractCegarLoop]: Abstraction has 298 states and 349 transitions. [2022-11-22 01:57:23,579 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:23,580 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 349 transitions. [2022-11-22 01:57:23,580 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-22 01:57:23,580 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:57:23,580 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:57:23,586 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Ended with exit code 0 [2022-11-22 01:57:23,786 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-22 01:57:23,786 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:57:23,787 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:57:23,787 INFO L85 PathProgramCache]: Analyzing trace with hash 207279946, now seen corresponding path program 5 times [2022-11-22 01:57:23,787 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:57:23,787 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019429322] [2022-11-22 01:57:23,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:57:23,787 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:57:23,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:57:24,454 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:57:24,454 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:57:24,454 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019429322] [2022-11-22 01:57:24,455 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2019429322] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:57:24,455 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [912903034] [2022-11-22 01:57:24,455 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:57:24,455 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:57:24,455 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:57:24,459 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:57:24,486 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-22 01:57:24,755 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 01:57:24,755 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:57:24,759 INFO L263 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 84 conjunts are in the unsatisfiable core [2022-11-22 01:57:24,762 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:57:25,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:57:25,712 INFO L321 Elim1Store]: treesize reduction 12, result has 84.4 percent of original size [2022-11-22 01:57:25,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 9 case distinctions, treesize of input 41 treesize of output 83 [2022-11-22 01:57:26,163 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 5 proven. 24 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-22 01:57:26,164 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:57:27,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 47 [2022-11-22 01:57:27,308 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:57:27,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 5 case distinctions, treesize of input 71 treesize of output 105 [2022-11-22 01:57:27,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 34 [2022-11-22 01:57:28,210 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 0 proven. 29 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-22 01:57:28,210 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [912903034] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:57:28,210 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [345792519] [2022-11-22 01:57:28,211 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:57:28,211 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:57:28,212 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:57:28,212 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:57:28,212 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:57:28,255 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:28,257 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:28,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:57:28,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:57:28,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:28,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:28,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:28,464 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:28,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:28,535 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:28,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:28,627 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:57:28,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:57:28,751 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:57:28,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:57:28,833 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:57:28,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:57:28,943 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:57:28,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:57:28,998 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:57:32,791 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13060#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:57:32,791 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:57:32,791 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:57:32,791 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 19] total 53 [2022-11-22 01:57:32,791 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1439465594] [2022-11-22 01:57:32,791 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:57:32,792 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-22 01:57:32,792 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:57:32,792 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-22 01:57:32,792 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=328, Invalid=4228, Unknown=0, NotChecked=0, Total=4556 [2022-11-22 01:57:32,793 INFO L87 Difference]: Start difference. First operand 298 states and 349 transitions. Second operand has 54 states, 53 states have (on average 1.679245283018868) internal successors, (89), 54 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:49,217 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:57:49,217 INFO L93 Difference]: Finished difference Result 453 states and 507 transitions. [2022-11-22 01:57:49,217 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 116 states. [2022-11-22 01:57:49,218 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 53 states have (on average 1.679245283018868) internal successors, (89), 54 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-22 01:57:49,218 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:57:49,219 INFO L225 Difference]: With dead ends: 453 [2022-11-22 01:57:49,219 INFO L226 Difference]: Without dead ends: 400 [2022-11-22 01:57:49,222 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 234 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 180 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9017 ImplicationChecksByTransitivity, 20.3s TimeCoverageRelationStatistics Valid=4239, Invalid=28703, Unknown=0, NotChecked=0, Total=32942 [2022-11-22 01:57:49,223 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 1538 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 2414 mSolverCounterSat, 178 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1538 SdHoareTripleChecker+Valid, 159 SdHoareTripleChecker+Invalid, 2592 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 178 IncrementalHoareTripleChecker+Valid, 2414 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:57:49,223 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1538 Valid, 159 Invalid, 2592 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [178 Valid, 2414 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-11-22 01:57:49,224 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 400 states. [2022-11-22 01:57:49,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 400 to 300. [2022-11-22 01:57:49,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 297 states have (on average 1.1717171717171717) internal successors, (348), 299 states have internal predecessors, (348), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:49,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 348 transitions. [2022-11-22 01:57:49,231 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 348 transitions. Word has length 35 [2022-11-22 01:57:49,231 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:57:49,231 INFO L495 AbstractCegarLoop]: Abstraction has 300 states and 348 transitions. [2022-11-22 01:57:49,231 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 53 states have (on average 1.679245283018868) internal successors, (89), 54 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:49,232 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 348 transitions. [2022-11-22 01:57:49,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-22 01:57:49,232 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:57:49,233 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:57:49,239 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-22 01:57:49,435 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-22 01:57:49,435 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:57:49,435 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:57:49,435 INFO L85 PathProgramCache]: Analyzing trace with hash -1157391528, now seen corresponding path program 8 times [2022-11-22 01:57:49,435 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:57:49,435 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1204193868] [2022-11-22 01:57:49,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:57:49,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:57:49,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:57:50,405 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 25 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:57:50,405 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:57:50,405 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1204193868] [2022-11-22 01:57:50,405 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1204193868] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:57:50,405 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1904534019] [2022-11-22 01:57:50,406 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:57:50,406 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:57:50,406 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:57:50,407 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:57:50,426 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-22 01:57:50,728 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-11-22 01:57:50,728 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:57:50,753 INFO L263 TraceCheckSpWp]: Trace formula consists of 264 conjuncts, 88 conjunts are in the unsatisfiable core [2022-11-22 01:57:50,755 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:57:51,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:57:52,435 INFO L321 Elim1Store]: treesize reduction 29, result has 49.1 percent of original size [2022-11-22 01:57:52,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 21 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 65 treesize of output 58 [2022-11-22 01:57:52,439 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-22 01:57:52,484 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 7 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:57:52,484 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:57:53,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 90 [2022-11-22 01:57:53,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 7 select indices, 7 select index equivalence classes, 21 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 78 [2022-11-22 01:57:55,208 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-22 01:57:55,223 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 49 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:57:55,223 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1904534019] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:57:55,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [88256958] [2022-11-22 01:57:55,224 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:57:55,224 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:57:55,224 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:57:55,225 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:57:55,225 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:57:55,261 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:55,263 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:55,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:57:55,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:55,370 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:55,396 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:55,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:55,500 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:57:55,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:57:55,575 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:57:57,760 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14329#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:57:57,760 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:57:57,761 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:57:57,761 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 27, 27] total 70 [2022-11-22 01:57:57,761 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [724622594] [2022-11-22 01:57:57,761 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:57:57,761 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 70 states [2022-11-22 01:57:57,761 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:57:57,762 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 70 interpolants. [2022-11-22 01:57:57,763 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=429, Invalid=5733, Unknown=0, NotChecked=0, Total=6162 [2022-11-22 01:57:57,763 INFO L87 Difference]: Start difference. First operand 300 states and 348 transitions. Second operand has 70 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 70 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:27,483 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:58:27,483 INFO L93 Difference]: Finished difference Result 780 states and 843 transitions. [2022-11-22 01:58:27,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 100 states. [2022-11-22 01:58:27,483 INFO L78 Accepts]: Start accepts. Automaton has has 70 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 70 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-22 01:58:27,484 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:58:27,486 INFO L225 Difference]: With dead ends: 780 [2022-11-22 01:58:27,486 INFO L226 Difference]: Without dead ends: 748 [2022-11-22 01:58:27,488 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 221 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 175 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7177 ImplicationChecksByTransitivity, 32.9s TimeCoverageRelationStatistics Valid=3637, Invalid=27515, Unknown=0, NotChecked=0, Total=31152 [2022-11-22 01:58:27,488 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 2452 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 3746 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2452 SdHoareTripleChecker+Valid, 284 SdHoareTripleChecker+Invalid, 3855 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 3746 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-11-22 01:58:27,488 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2452 Valid, 284 Invalid, 3855 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 3746 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2022-11-22 01:58:27,489 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 748 states. [2022-11-22 01:58:27,497 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 748 to 334. [2022-11-22 01:58:27,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 334 states, 331 states have (on average 1.1782477341389728) internal successors, (390), 333 states have internal predecessors, (390), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:27,499 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 334 states to 334 states and 390 transitions. [2022-11-22 01:58:27,499 INFO L78 Accepts]: Start accepts. Automaton has 334 states and 390 transitions. Word has length 35 [2022-11-22 01:58:27,499 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:58:27,499 INFO L495 AbstractCegarLoop]: Abstraction has 334 states and 390 transitions. [2022-11-22 01:58:27,500 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 70 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 70 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:27,500 INFO L276 IsEmpty]: Start isEmpty. Operand 334 states and 390 transitions. [2022-11-22 01:58:27,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-22 01:58:27,501 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:58:27,501 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:58:27,516 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-22 01:58:27,707 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable39,29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:58:27,707 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:58:27,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:58:27,708 INFO L85 PathProgramCache]: Analyzing trace with hash -1976859297, now seen corresponding path program 7 times [2022-11-22 01:58:27,708 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:58:27,708 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1542610763] [2022-11-22 01:58:27,708 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:58:27,708 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:58:27,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:58:28,103 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:58:28,103 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:58:28,103 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1542610763] [2022-11-22 01:58:28,104 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1542610763] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:58:28,104 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1601167292] [2022-11-22 01:58:28,104 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:58:28,104 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:58:28,104 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:58:28,107 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:58:28,115 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-22 01:58:28,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:58:28,287 INFO L263 TraceCheckSpWp]: Trace formula consists of 304 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-22 01:58:28,288 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:58:28,453 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:58:28,453 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:58:28,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 01:58:28,734 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:58:28,734 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1601167292] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:58:28,735 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1115191474] [2022-11-22 01:58:28,736 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:58:28,736 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:58:28,736 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:58:28,736 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:58:28,737 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:58:28,778 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:28,780 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:28,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:58:28,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:58:28,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:28,878 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:28,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:28,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:29,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:29,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:29,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:29,141 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:58:29,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:58:29,233 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:58:29,283 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 01:58:29,284 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 01:58:29,406 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:58:29,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:58:29,513 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:58:29,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:58:29,567 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:58:32,718 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15885#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:58:32,719 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:58:32,719 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:58:32,719 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 26 [2022-11-22 01:58:32,719 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [899329267] [2022-11-22 01:58:32,719 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:58:32,719 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-22 01:58:32,720 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:58:32,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-22 01:58:32,720 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=171, Invalid=1469, Unknown=0, NotChecked=0, Total=1640 [2022-11-22 01:58:32,720 INFO L87 Difference]: Start difference. First operand 334 states and 390 transitions. Second operand has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:33,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:58:33,379 INFO L93 Difference]: Finished difference Result 367 states and 416 transitions. [2022-11-22 01:58:33,379 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-22 01:58:33,379 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-22 01:58:33,379 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:58:33,381 INFO L225 Difference]: With dead ends: 367 [2022-11-22 01:58:33,381 INFO L226 Difference]: Without dead ends: 367 [2022-11-22 01:58:33,381 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 131 GetRequests, 75 SyntacticMatches, 4 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 656 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=386, Invalid=2476, Unknown=0, NotChecked=0, Total=2862 [2022-11-22 01:58:33,382 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 258 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 585 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 258 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 595 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 585 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:58:33,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [258 Valid, 172 Invalid, 595 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 585 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 01:58:33,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 367 states. [2022-11-22 01:58:33,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 367 to 347. [2022-11-22 01:58:33,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 344 states have (on average 1.1715116279069768) internal successors, (403), 346 states have internal predecessors, (403), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:33,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 403 transitions. [2022-11-22 01:58:33,390 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 403 transitions. Word has length 36 [2022-11-22 01:58:33,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:58:33,390 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 403 transitions. [2022-11-22 01:58:33,391 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:33,391 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 403 transitions. [2022-11-22 01:58:33,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-22 01:58:33,392 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:58:33,392 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:58:33,399 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-22 01:58:33,598 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable40 [2022-11-22 01:58:33,598 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:58:33,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:58:33,598 INFO L85 PathProgramCache]: Analyzing trace with hash 1835991054, now seen corresponding path program 9 times [2022-11-22 01:58:33,599 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:58:33,599 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [891842443] [2022-11-22 01:58:33,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:58:33,599 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:58:33,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:58:34,478 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 36 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:58:34,479 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:58:34,479 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [891842443] [2022-11-22 01:58:34,479 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [891842443] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:58:34,479 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2135153463] [2022-11-22 01:58:34,479 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:58:34,479 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:58:34,480 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:58:34,481 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:58:34,506 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-22 01:58:34,717 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:58:34,718 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:58:34,721 INFO L263 TraceCheckSpWp]: Trace formula consists of 288 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-22 01:58:34,723 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:58:35,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:36,877 INFO L321 Elim1Store]: treesize reduction 33, result has 49.2 percent of original size [2022-11-22 01:58:36,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 88 treesize of output 66 [2022-11-22 01:58:36,880 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-22 01:58:36,936 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 8 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:58:36,936 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:58:38,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 103 [2022-11-22 01:58:38,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 28 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 89 [2022-11-22 01:58:40,326 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-22 01:58:40,338 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 64 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:58:40,338 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2135153463] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:58:40,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1148899556] [2022-11-22 01:58:40,344 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:58:40,344 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:58:40,344 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:58:40,345 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:58:40,345 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:58:40,377 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:40,379 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:40,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:58:40,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:58:40,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:40,505 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:40,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:40,609 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:58:40,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:58:40,677 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:58:42,883 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16945#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:58:42,883 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:58:42,884 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:58:42,884 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 30, 30] total 78 [2022-11-22 01:58:42,884 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1173963752] [2022-11-22 01:58:42,884 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:58:42,884 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 78 states [2022-11-22 01:58:42,885 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:58:42,885 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 78 interpolants. [2022-11-22 01:58:42,885 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=550, Invalid=6932, Unknown=0, NotChecked=0, Total=7482 [2022-11-22 01:58:42,886 INFO L87 Difference]: Start difference. First operand 347 states and 403 transitions. Second operand has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:56,084 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.11s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:59:13,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:59:13,254 INFO L93 Difference]: Finished difference Result 1055 states and 1141 transitions. [2022-11-22 01:59:13,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 129 states. [2022-11-22 01:59:13,254 INFO L78 Accepts]: Start accepts. Automaton has has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-22 01:59:13,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:59:13,256 INFO L225 Difference]: With dead ends: 1055 [2022-11-22 01:59:13,256 INFO L226 Difference]: Without dead ends: 1019 [2022-11-22 01:59:13,258 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 264 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 212 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11795 ImplicationChecksByTransitivity, 31.5s TimeCoverageRelationStatistics Valid=5138, Invalid=40444, Unknown=0, NotChecked=0, Total=45582 [2022-11-22 01:59:13,259 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 2260 mSDsluCounter, 367 mSDsCounter, 0 mSdLazyCounter, 5141 mSolverCounterSat, 113 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2260 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 5255 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 113 IncrementalHoareTripleChecker+Valid, 5141 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.6s IncrementalHoareTripleChecker+Time [2022-11-22 01:59:13,259 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2260 Valid, 381 Invalid, 5255 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [113 Valid, 5141 Invalid, 1 Unknown, 0 Unchecked, 5.6s Time] [2022-11-22 01:59:13,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1019 states. [2022-11-22 01:59:13,270 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1019 to 381. [2022-11-22 01:59:13,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 381 states, 378 states have (on average 1.1772486772486772) internal successors, (445), 380 states have internal predecessors, (445), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:13,271 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 381 states to 381 states and 445 transitions. [2022-11-22 01:59:13,271 INFO L78 Accepts]: Start accepts. Automaton has 381 states and 445 transitions. Word has length 39 [2022-11-22 01:59:13,272 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:59:13,272 INFO L495 AbstractCegarLoop]: Abstraction has 381 states and 445 transitions. [2022-11-22 01:59:13,272 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:13,272 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 445 transitions. [2022-11-22 01:59:13,273 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-22 01:59:13,273 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:59:13,273 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:59:13,287 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-22 01:59:13,479 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable41 [2022-11-22 01:59:13,479 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:59:13,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:59:13,480 INFO L85 PathProgramCache]: Analyzing trace with hash -735449305, now seen corresponding path program 8 times [2022-11-22 01:59:13,480 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:59:13,480 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [705180264] [2022-11-22 01:59:13,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:59:13,480 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:59:13,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:59:14,714 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 8 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:59:14,714 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:59:14,714 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [705180264] [2022-11-22 01:59:14,714 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [705180264] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:59:14,714 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1402747206] [2022-11-22 01:59:14,714 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:59:14,714 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:59:14,715 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:59:14,716 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:59:14,738 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-22 01:59:15,010 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 01:59:15,010 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:59:15,015 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 115 conjunts are in the unsatisfiable core [2022-11-22 01:59:15,018 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:59:15,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:59:15,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:59:15,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:59:15,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:59:15,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:59:15,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:59:15,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 01:59:15,740 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:59:15,741 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:59:15,754 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1243 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1243) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-22 01:59:15,826 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1243 (Array Int Int)) (v_ArrVal_1242 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1242) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1243) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 01:59:15,834 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1243 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1243) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 01:59:15,842 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1243 (Array Int Int)) (v_ArrVal_1241 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1241) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1243) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 01:59:15,995 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:59:15,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:59:16,004 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:59:16,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:59:16,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:59:16,301 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 8 proven. 15 refuted. 0 times theorem prover too weak. 16 trivial. 18 not checked. [2022-11-22 01:59:16,301 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1402747206] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:59:16,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [471459005] [2022-11-22 01:59:16,302 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:59:16,303 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:59:16,303 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:59:16,303 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:59:16,303 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:59:16,343 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:16,345 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:16,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:59:16,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:16,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:16,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:16,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:16,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:16,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:16,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:16,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:16,714 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:59:16,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:59:16,809 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:59:16,812 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:59:16,864 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 01:59:16,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 01:59:16,980 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:16,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:17,076 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:17,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:17,135 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:59:20,749 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18926#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:59:20,749 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:59:20,749 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:59:20,749 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 18, 18] total 48 [2022-11-22 01:59:20,749 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [278298305] [2022-11-22 01:59:20,749 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:59:20,749 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-22 01:59:20,750 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:59:20,750 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-22 01:59:20,750 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=227, Invalid=3069, Unknown=26, NotChecked=460, Total=3782 [2022-11-22 01:59:20,751 INFO L87 Difference]: Start difference. First operand 381 states and 445 transitions. Second operand has 48 states, 48 states have (on average 1.8333333333333333) internal successors, (88), 48 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:23,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:59:23,809 INFO L93 Difference]: Finished difference Result 592 states and 685 transitions. [2022-11-22 01:59:23,809 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-11-22 01:59:23,810 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 1.8333333333333333) internal successors, (88), 48 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-22 01:59:23,810 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:59:23,811 INFO L225 Difference]: With dead ends: 592 [2022-11-22 01:59:23,811 INFO L226 Difference]: Without dead ends: 528 [2022-11-22 01:59:23,812 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 81 SyntacticMatches, 4 SemanticMatches, 89 ConstructedPredicates, 4 IntricatePredicates, 2 DeprecatedPredicates, 1892 ImplicationChecksByTransitivity, 7.0s TimeCoverageRelationStatistics Valid=592, Invalid=6878, Unknown=28, NotChecked=692, Total=8190 [2022-11-22 01:59:23,813 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 348 mSDsluCounter, 372 mSDsCounter, 0 mSdLazyCounter, 1281 mSolverCounterSat, 34 mSolverCounterUnsat, 21 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 348 SdHoareTripleChecker+Valid, 403 SdHoareTripleChecker+Invalid, 1711 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 1281 IncrementalHoareTripleChecker+Invalid, 21 IncrementalHoareTripleChecker+Unknown, 375 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-22 01:59:23,813 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [348 Valid, 403 Invalid, 1711 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 1281 Invalid, 21 Unknown, 375 Unchecked, 0.8s Time] [2022-11-22 01:59:23,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 528 states. [2022-11-22 01:59:23,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 528 to 494. [2022-11-22 01:59:23,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 494 states, 491 states have (on average 1.1812627291242364) internal successors, (580), 493 states have internal predecessors, (580), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:23,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 494 states to 494 states and 580 transitions. [2022-11-22 01:59:23,822 INFO L78 Accepts]: Start accepts. Automaton has 494 states and 580 transitions. Word has length 40 [2022-11-22 01:59:23,822 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:59:23,823 INFO L495 AbstractCegarLoop]: Abstraction has 494 states and 580 transitions. [2022-11-22 01:59:23,823 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 1.8333333333333333) internal successors, (88), 48 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:23,823 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 580 transitions. [2022-11-22 01:59:23,824 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-22 01:59:23,824 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:59:23,824 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:59:23,835 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-22 01:59:24,031 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable42,32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:59:24,031 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:59:24,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:59:24,031 INFO L85 PathProgramCache]: Analyzing trace with hash -786413679, now seen corresponding path program 6 times [2022-11-22 01:59:24,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:59:24,031 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1394886508] [2022-11-22 01:59:24,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:59:24,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:59:24,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:59:24,654 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 5 proven. 24 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-22 01:59:24,654 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:59:24,654 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1394886508] [2022-11-22 01:59:24,654 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1394886508] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:59:24,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [650442222] [2022-11-22 01:59:24,655 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:59:24,655 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:59:24,655 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:59:24,657 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:59:24,686 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-22 01:59:25,030 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:59:25,031 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:59:25,034 INFO L263 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-22 01:59:25,036 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:59:25,324 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:25,365 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:59:25,367 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:59:25,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 01:59:25,371 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 8 proven. 21 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-22 01:59:25,371 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:59:25,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 01:59:25,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-22 01:59:25,780 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 13 proven. 16 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-22 01:59:25,780 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [650442222] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:59:25,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [972938193] [2022-11-22 01:59:25,781 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:59:25,781 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:59:25,782 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:59:25,782 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:59:25,782 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:59:25,824 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:25,826 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:25,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:59:25,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:25,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:25,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:25,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:59:26,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:26,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:26,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:26,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:26,195 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:59:26,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:59:26,332 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:59:26,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:59:26,411 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:26,411 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:26,515 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:26,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:26,570 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:59:29,473 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20361#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:59:29,473 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:59:29,473 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:59:29,473 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 35 [2022-11-22 01:59:29,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [316957167] [2022-11-22 01:59:29,473 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:59:29,474 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-22 01:59:29,474 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:59:29,474 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-22 01:59:29,474 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=282, Invalid=2070, Unknown=0, NotChecked=0, Total=2352 [2022-11-22 01:59:29,475 INFO L87 Difference]: Start difference. First operand 494 states and 580 transitions. Second operand has 35 states, 35 states have (on average 1.9714285714285715) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:30,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:59:30,780 INFO L93 Difference]: Finished difference Result 541 states and 621 transitions. [2022-11-22 01:59:30,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-22 01:59:30,780 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 35 states have (on average 1.9714285714285715) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-22 01:59:30,780 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:59:30,782 INFO L225 Difference]: With dead ends: 541 [2022-11-22 01:59:30,783 INFO L226 Difference]: Without dead ends: 537 [2022-11-22 01:59:30,783 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 154 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1283 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=712, Invalid=3844, Unknown=0, NotChecked=0, Total=4556 [2022-11-22 01:59:30,783 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 346 mSDsluCounter, 224 mSDsCounter, 0 mSdLazyCounter, 455 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 346 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 468 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 455 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:59:30,783 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [346 Valid, 239 Invalid, 468 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 455 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 01:59:30,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 537 states. [2022-11-22 01:59:30,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 537 to 482. [2022-11-22 01:59:30,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 482 states, 479 states have (on average 1.1795407098121085) internal successors, (565), 481 states have internal predecessors, (565), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:30,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 482 states to 482 states and 565 transitions. [2022-11-22 01:59:30,792 INFO L78 Accepts]: Start accepts. Automaton has 482 states and 565 transitions. Word has length 41 [2022-11-22 01:59:30,793 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:59:30,793 INFO L495 AbstractCegarLoop]: Abstraction has 482 states and 565 transitions. [2022-11-22 01:59:30,793 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 35 states have (on average 1.9714285714285715) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:30,793 INFO L276 IsEmpty]: Start isEmpty. Operand 482 states and 565 transitions. [2022-11-22 01:59:30,794 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-22 01:59:30,794 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:59:30,794 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:59:30,805 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Ended with exit code 0 [2022-11-22 01:59:31,001 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable43,33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:59:31,001 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:59:31,001 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:59:31,001 INFO L85 PathProgramCache]: Analyzing trace with hash -824464203, now seen corresponding path program 7 times [2022-11-22 01:59:31,001 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:59:31,002 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1005718647] [2022-11-22 01:59:31,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:59:31,002 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:59:31,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:59:31,990 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 12 proven. 35 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-22 01:59:31,990 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:59:31,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1005718647] [2022-11-22 01:59:31,990 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1005718647] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:59:31,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [20517870] [2022-11-22 01:59:31,990 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:59:31,991 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:59:31,991 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:59:31,992 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:59:32,014 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-22 01:59:32,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:59:32,188 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 52 conjunts are in the unsatisfiable core [2022-11-22 01:59:32,190 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:59:32,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:59:32,809 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:59:32,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 15 [2022-11-22 01:59:32,813 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 13 proven. 34 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-22 01:59:32,813 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:59:32,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-22 01:59:32,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 34 [2022-11-22 01:59:33,593 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 22 proven. 25 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-22 01:59:33,593 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [20517870] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:59:33,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1638448158] [2022-11-22 01:59:33,594 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:59:33,594 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:59:33,595 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:59:33,595 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:59:33,595 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:59:33,632 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:33,634 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:33,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:59:33,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:33,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:33,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:33,796 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:59:33,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:33,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:33,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:33,952 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:33,994 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:59:33,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:59:34,139 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:59:34,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:59:34,221 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:34,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:34,317 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:34,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:34,373 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:59:37,825 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21723#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:59:37,825 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:59:37,825 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:59:37,825 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 47 [2022-11-22 01:59:37,826 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [67908665] [2022-11-22 01:59:37,826 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:59:37,826 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-11-22 01:59:37,826 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:59:37,826 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-11-22 01:59:37,826 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=348, Invalid=3312, Unknown=0, NotChecked=0, Total=3660 [2022-11-22 01:59:37,827 INFO L87 Difference]: Start difference. First operand 482 states and 565 transitions. Second operand has 47 states, 47 states have (on average 1.7446808510638299) internal successors, (82), 47 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:39,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:59:39,430 INFO L93 Difference]: Finished difference Result 568 states and 646 transitions. [2022-11-22 01:59:39,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-22 01:59:39,431 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 1.7446808510638299) internal successors, (82), 47 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-22 01:59:39,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:59:39,433 INFO L225 Difference]: With dead ends: 568 [2022-11-22 01:59:39,434 INFO L226 Difference]: Without dead ends: 552 [2022-11-22 01:59:39,434 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 78 SyntacticMatches, 2 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1970 ImplicationChecksByTransitivity, 5.8s TimeCoverageRelationStatistics Valid=1014, Invalid=6296, Unknown=0, NotChecked=0, Total=7310 [2022-11-22 01:59:39,434 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 439 mSDsluCounter, 212 mSDsCounter, 0 mSdLazyCounter, 718 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 439 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 742 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 718 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:59:39,435 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [439 Valid, 223 Invalid, 742 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 718 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-22 01:59:39,435 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 552 states. [2022-11-22 01:59:39,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 552 to 460. [2022-11-22 01:59:39,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 460 states, 457 states have (on average 1.1772428884026258) internal successors, (538), 459 states have internal predecessors, (538), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:39,447 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 460 states to 460 states and 538 transitions. [2022-11-22 01:59:39,447 INFO L78 Accepts]: Start accepts. Automaton has 460 states and 538 transitions. Word has length 41 [2022-11-22 01:59:39,447 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:59:39,447 INFO L495 AbstractCegarLoop]: Abstraction has 460 states and 538 transitions. [2022-11-22 01:59:39,447 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 1.7446808510638299) internal successors, (82), 47 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:39,448 INFO L276 IsEmpty]: Start isEmpty. Operand 460 states and 538 transitions. [2022-11-22 01:59:39,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-22 01:59:39,449 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:59:39,449 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:59:39,462 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-22 01:59:39,655 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable44,34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:59:39,655 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:59:39,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:59:39,656 INFO L85 PathProgramCache]: Analyzing trace with hash -493612588, now seen corresponding path program 9 times [2022-11-22 01:59:39,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:59:39,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2105934746] [2022-11-22 01:59:39,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:59:39,656 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:59:39,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:59:39,936 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-11-22 01:59:39,936 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:59:39,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2105934746] [2022-11-22 01:59:39,936 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2105934746] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:59:39,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [346276007] [2022-11-22 01:59:39,936 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:59:39,936 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:59:39,936 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:59:39,937 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:59:39,939 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-22 01:59:40,331 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:59:40,331 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:59:40,334 INFO L263 TraceCheckSpWp]: Trace formula consists of 348 conjuncts, 15 conjunts are in the unsatisfiable core [2022-11-22 01:59:40,335 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:59:40,624 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 9 proven. 23 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-11-22 01:59:40,624 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:59:40,955 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 16 proven. 16 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-11-22 01:59:40,955 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [346276007] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:59:40,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1996880773] [2022-11-22 01:59:40,956 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:59:40,957 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:59:40,957 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:59:40,957 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:59:40,957 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:59:40,990 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:40,993 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:40,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:59:41,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:41,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:41,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:41,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:41,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:41,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:41,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:41,297 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:41,349 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:59:41,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:59:41,461 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:59:41,513 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 01:59:41,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 01:59:41,623 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:41,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:41,721 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:41,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:41,775 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:59:44,821 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23096#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:59:44,821 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:59:44,821 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:59:44,821 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13, 13] total 35 [2022-11-22 01:59:44,821 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1961903953] [2022-11-22 01:59:44,822 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:59:44,822 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-22 01:59:44,822 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:59:44,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-22 01:59:44,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=319, Invalid=2033, Unknown=0, NotChecked=0, Total=2352 [2022-11-22 01:59:44,823 INFO L87 Difference]: Start difference. First operand 460 states and 538 transitions. Second operand has 35 states, 35 states have (on average 2.0285714285714285) internal successors, (71), 35 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:45,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:59:45,711 INFO L93 Difference]: Finished difference Result 490 states and 561 transitions. [2022-11-22 01:59:45,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-22 01:59:45,711 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 35 states have (on average 2.0285714285714285) internal successors, (71), 35 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-22 01:59:45,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:59:45,714 INFO L225 Difference]: With dead ends: 490 [2022-11-22 01:59:45,714 INFO L226 Difference]: Without dead ends: 488 [2022-11-22 01:59:45,714 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1353 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=715, Invalid=3707, Unknown=0, NotChecked=0, Total=4422 [2022-11-22 01:59:45,714 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 376 mSDsluCounter, 120 mSDsCounter, 0 mSdLazyCounter, 266 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 376 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 285 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 266 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:59:45,715 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [376 Valid, 141 Invalid, 285 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 266 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:59:45,715 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 488 states. [2022-11-22 01:59:45,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 488 to 456. [2022-11-22 01:59:45,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 456 states, 453 states have (on average 1.1766004415011038) internal successors, (533), 455 states have internal predecessors, (533), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:45,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 456 states to 456 states and 533 transitions. [2022-11-22 01:59:45,723 INFO L78 Accepts]: Start accepts. Automaton has 456 states and 533 transitions. Word has length 42 [2022-11-22 01:59:45,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:59:45,723 INFO L495 AbstractCegarLoop]: Abstraction has 456 states and 533 transitions. [2022-11-22 01:59:45,723 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 35 states have (on average 2.0285714285714285) internal successors, (71), 35 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:45,723 INFO L276 IsEmpty]: Start isEmpty. Operand 456 states and 533 transitions. [2022-11-22 01:59:45,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-22 01:59:45,724 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:59:45,725 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:59:45,732 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-22 01:59:45,931 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-11-22 01:59:45,931 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 01:59:45,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:59:45,932 INFO L85 PathProgramCache]: Analyzing trace with hash -308079726, now seen corresponding path program 8 times [2022-11-22 01:59:45,932 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:59:45,932 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1705249908] [2022-11-22 01:59:45,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:59:45,932 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:59:45,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:59:46,828 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 16 proven. 50 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:59:46,828 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:59:46,828 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1705249908] [2022-11-22 01:59:46,828 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1705249908] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:59:46,828 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [658840020] [2022-11-22 01:59:46,828 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:59:46,828 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:59:46,829 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:59:46,829 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:59:46,832 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-22 01:59:47,171 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 01:59:47,171 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:59:47,174 INFO L263 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-22 01:59:47,177 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:59:47,193 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:59:47,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:59:47,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:59:47,995 INFO L321 Elim1Store]: treesize reduction 12, result has 84.4 percent of original size [2022-11-22 01:59:47,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 9 case distinctions, treesize of input 41 treesize of output 83 [2022-11-22 01:59:48,560 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 6 proven. 34 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-22 01:59:48,560 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:59:49,814 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 47 [2022-11-22 01:59:49,848 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:59:49,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 5 case distinctions, treesize of input 71 treesize of output 105 [2022-11-22 01:59:51,038 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 4 proven. 46 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-22 01:59:51,038 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [658840020] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:59:51,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1122836970] [2022-11-22 01:59:51,039 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 01:59:51,039 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:59:51,039 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:59:51,039 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:59:51,039 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:59:51,083 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:51,085 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:51,086 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:59:51,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:59:51,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:51,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:51,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:59:51,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:51,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:51,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:51,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:51,449 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 01:59:51,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:59:51,605 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:59:51,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:59:51,685 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:51,686 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:51,789 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:51,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:51,847 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:59:55,677 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24401#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:59:55,677 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:59:55,677 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:59:55,677 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 19, 20] total 56 [2022-11-22 01:59:55,677 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1421656696] [2022-11-22 01:59:55,677 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:59:55,679 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-11-22 01:59:55,679 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:59:55,679 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-11-22 01:59:55,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=356, Invalid=4614, Unknown=0, NotChecked=0, Total=4970 [2022-11-22 01:59:55,680 INFO L87 Difference]: Start difference. First operand 456 states and 533 transitions. Second operand has 57 states, 56 states have (on average 1.9464285714285714) internal successors, (109), 57 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:00:17,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:00:17,287 INFO L93 Difference]: Finished difference Result 703 states and 790 transitions. [2022-11-22 02:00:17,287 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 127 states. [2022-11-22 02:00:17,288 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 56 states have (on average 1.9464285714285714) internal successors, (109), 57 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-22 02:00:17,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:00:17,290 INFO L225 Difference]: With dead ends: 703 [2022-11-22 02:00:17,290 INFO L226 Difference]: Without dead ends: 616 [2022-11-22 02:00:17,292 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 271 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 194 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10315 ImplicationChecksByTransitivity, 25.4s TimeCoverageRelationStatistics Valid=4676, Invalid=33544, Unknown=0, NotChecked=0, Total=38220 [2022-11-22 02:00:17,292 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 1729 mSDsluCounter, 212 mSDsCounter, 0 mSdLazyCounter, 3352 mSolverCounterSat, 195 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1729 SdHoareTripleChecker+Valid, 225 SdHoareTripleChecker+Invalid, 3547 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 195 IncrementalHoareTripleChecker+Valid, 3352 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2022-11-22 02:00:17,292 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1729 Valid, 225 Invalid, 3547 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [195 Valid, 3352 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2022-11-22 02:00:17,293 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 616 states. [2022-11-22 02:00:17,298 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 616 to 442. [2022-11-22 02:00:17,298 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 442 states, 439 states have (on average 1.1594533029612757) internal successors, (509), 441 states have internal predecessors, (509), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:00:17,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 442 states to 442 states and 509 transitions. [2022-11-22 02:00:17,300 INFO L78 Accepts]: Start accepts. Automaton has 442 states and 509 transitions. Word has length 43 [2022-11-22 02:00:17,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:00:17,300 INFO L495 AbstractCegarLoop]: Abstraction has 442 states and 509 transitions. [2022-11-22 02:00:17,300 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 56 states have (on average 1.9464285714285714) internal successors, (109), 57 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:00:17,301 INFO L276 IsEmpty]: Start isEmpty. Operand 442 states and 509 transitions. [2022-11-22 02:00:17,301 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-22 02:00:17,301 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:00:17,302 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:00:17,309 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-22 02:00:17,508 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-11-22 02:00:17,508 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:00:17,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:00:17,508 INFO L85 PathProgramCache]: Analyzing trace with hash 159815876, now seen corresponding path program 10 times [2022-11-22 02:00:17,508 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:00:17,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [276017859] [2022-11-22 02:00:17,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:00:17,509 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:00:17,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:00:18,612 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 49 proven. 113 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:00:18,612 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:00:18,612 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [276017859] [2022-11-22 02:00:18,612 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [276017859] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:00:18,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1673714456] [2022-11-22 02:00:18,613 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:00:18,613 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:00:18,613 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:00:18,614 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:00:18,616 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-22 02:00:18,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:00:18,802 INFO L263 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 97 conjunts are in the unsatisfiable core [2022-11-22 02:00:18,804 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:00:19,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 02:00:21,508 INFO L321 Elim1Store]: treesize reduction 37, result has 49.3 percent of original size [2022-11-22 02:00:21,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 10 select indices, 10 select index equivalence classes, 36 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 45 case distinctions, treesize of input 81 treesize of output 74 [2022-11-22 02:00:21,510 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-22 02:00:21,570 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 9 proven. 153 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:00:21,571 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:00:23,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 134 treesize of output 116 [2022-11-22 02:00:23,431 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:00:23,431 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 9 select indices, 9 select index equivalence classes, 0 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 134 treesize of output 100 [2022-11-22 02:00:25,665 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 81 proven. 81 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:00:25,666 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1673714456] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:00:25,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1006005086] [2022-11-22 02:00:25,667 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:00:25,667 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:00:25,667 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:00:25,667 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:00:25,667 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:00:25,701 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:00:25,703 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:00:25,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:00:25,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:00:25,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:00:25,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:00:25,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:00:25,915 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:00:25,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:00:26,006 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:00:28,492 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '26149#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:00:28,492 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:00:28,492 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:00:28,492 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 33, 33] total 87 [2022-11-22 02:00:28,492 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [260942930] [2022-11-22 02:00:28,492 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:00:28,493 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 87 states [2022-11-22 02:00:28,493 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:00:28,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 87 interpolants. [2022-11-22 02:00:28,494 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=664, Invalid=8456, Unknown=0, NotChecked=0, Total=9120 [2022-11-22 02:00:28,494 INFO L87 Difference]: Start difference. First operand 442 states and 509 transitions. Second operand has 87 states, 87 states have (on average 1.4482758620689655) internal successors, (126), 87 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:29,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:01:29,913 INFO L93 Difference]: Finished difference Result 1301 states and 1405 transitions. [2022-11-22 02:01:29,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 145 states. [2022-11-22 02:01:29,913 INFO L78 Accepts]: Start accepts. Automaton has has 87 states, 87 states have (on average 1.4482758620689655) internal successors, (126), 87 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-22 02:01:29,914 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:01:29,916 INFO L225 Difference]: With dead ends: 1301 [2022-11-22 02:01:29,916 INFO L226 Difference]: Without dead ends: 1281 [2022-11-22 02:01:29,919 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 293 GetRequests, 56 SyntacticMatches, 1 SemanticMatches, 236 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14498 ImplicationChecksByTransitivity, 64.5s TimeCoverageRelationStatistics Valid=6308, Invalid=50098, Unknown=0, NotChecked=0, Total=56406 [2022-11-22 02:01:29,919 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 3126 mSDsluCounter, 403 mSDsCounter, 0 mSdLazyCounter, 6208 mSolverCounterSat, 147 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3126 SdHoareTripleChecker+Valid, 417 SdHoareTripleChecker+Invalid, 6355 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 147 IncrementalHoareTripleChecker+Valid, 6208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:01:29,919 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3126 Valid, 417 Invalid, 6355 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [147 Valid, 6208 Invalid, 0 Unknown, 0 Unchecked, 5.0s Time] [2022-11-22 02:01:29,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1281 states. [2022-11-22 02:01:29,930 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1281 to 536. [2022-11-22 02:01:29,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 536 states, 533 states have (on average 1.1632270168855534) internal successors, (620), 535 states have internal predecessors, (620), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:29,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 536 states to 536 states and 620 transitions. [2022-11-22 02:01:29,932 INFO L78 Accepts]: Start accepts. Automaton has 536 states and 620 transitions. Word has length 43 [2022-11-22 02:01:29,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:01:29,932 INFO L495 AbstractCegarLoop]: Abstraction has 536 states and 620 transitions. [2022-11-22 02:01:29,932 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 87 states, 87 states have (on average 1.4482758620689655) internal successors, (126), 87 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:29,933 INFO L276 IsEmpty]: Start isEmpty. Operand 536 states and 620 transitions. [2022-11-22 02:01:29,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-22 02:01:29,934 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:01:29,934 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:01:29,940 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-11-22 02:01:30,140 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable47,37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:01:30,140 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:01:30,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:01:30,141 INFO L85 PathProgramCache]: Analyzing trace with hash 1448059287, now seen corresponding path program 10 times [2022-11-22 02:01:30,141 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:01:30,141 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2056867209] [2022-11-22 02:01:30,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:01:30,141 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:01:30,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:01:30,548 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 4 proven. 44 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:01:30,548 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:01:30,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2056867209] [2022-11-22 02:01:30,549 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2056867209] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:01:30,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1508524689] [2022-11-22 02:01:30,549 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:01:30,549 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:01:30,549 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:01:30,550 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:01:30,570 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-22 02:01:30,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:01:30,779 INFO L263 TraceCheckSpWp]: Trace formula consists of 361 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-22 02:01:30,780 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:01:31,005 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:01:31,005 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:01:31,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:01:31,377 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:01:31,377 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1508524689] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:01:31,377 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [159999821] [2022-11-22 02:01:31,378 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:01:31,378 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:01:31,378 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:01:31,378 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:01:31,378 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:01:31,418 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:01:31,421 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:01:31,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:01:31,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:31,501 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:31,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:31,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:31,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:31,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:31,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:31,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:31,769 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:01:31,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:01:31,877 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:01:31,879 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:01:31,931 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 02:01:31,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 02:01:32,051 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:01:32,051 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:01:32,150 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:01:32,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:01:32,201 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:01:35,384 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '28568#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:01:35,384 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:01:35,385 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:01:35,385 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 30 [2022-11-22 02:01:35,385 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1314377475] [2022-11-22 02:01:35,385 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:01:35,385 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-22 02:01:35,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:01:35,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-22 02:01:35,386 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1786, Unknown=0, NotChecked=0, Total=1980 [2022-11-22 02:01:35,386 INFO L87 Difference]: Start difference. First operand 536 states and 620 transitions. Second operand has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:36,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:01:36,214 INFO L93 Difference]: Finished difference Result 590 states and 665 transitions. [2022-11-22 02:01:36,214 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-22 02:01:36,215 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-11-22 02:01:36,215 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:01:36,216 INFO L225 Difference]: With dead ends: 590 [2022-11-22 02:01:36,217 INFO L226 Difference]: Without dead ends: 590 [2022-11-22 02:01:36,217 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 96 SyntacticMatches, 5 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 893 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=497, Invalid=3163, Unknown=0, NotChecked=0, Total=3660 [2022-11-22 02:01:36,219 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 446 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 684 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 446 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 697 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 684 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 02:01:36,219 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [446 Valid, 194 Invalid, 697 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 684 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-22 02:01:36,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 590 states. [2022-11-22 02:01:36,227 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 590 to 549. [2022-11-22 02:01:36,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 549 states, 546 states have (on average 1.1593406593406594) internal successors, (633), 548 states have internal predecessors, (633), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:36,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 549 states to 549 states and 633 transitions. [2022-11-22 02:01:36,229 INFO L78 Accepts]: Start accepts. Automaton has 549 states and 633 transitions. Word has length 44 [2022-11-22 02:01:36,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:01:36,229 INFO L495 AbstractCegarLoop]: Abstraction has 549 states and 633 transitions. [2022-11-22 02:01:36,230 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:36,230 INFO L276 IsEmpty]: Start isEmpty. Operand 549 states and 633 transitions. [2022-11-22 02:01:36,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-22 02:01:36,231 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:01:36,231 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:01:36,242 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-11-22 02:01:36,437 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-22 02:01:36,439 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:01:36,439 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:01:36,440 INFO L85 PathProgramCache]: Analyzing trace with hash -1649629830, now seen corresponding path program 11 times [2022-11-22 02:01:36,440 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:01:36,440 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [88822129] [2022-11-22 02:01:36,440 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:01:36,440 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:01:36,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:01:37,549 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 64 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:01:37,549 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:01:37,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [88822129] [2022-11-22 02:01:37,549 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [88822129] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:01:37,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [745762160] [2022-11-22 02:01:37,549 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:01:37,550 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:01:37,550 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:01:37,550 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:01:37,553 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-11-22 02:01:37,924 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-11-22 02:01:37,924 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:01:37,929 INFO L263 TraceCheckSpWp]: Trace formula consists of 336 conjuncts, 122 conjunts are in the unsatisfiable core [2022-11-22 02:01:37,932 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:01:38,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 02:01:41,353 INFO L321 Elim1Store]: treesize reduction 43, result has 48.2 percent of original size [2022-11-22 02:01:41,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 11 select indices, 11 select index equivalence classes, 45 disjoint index pairs (out of 55 index pairs), introduced 11 new quantified variables, introduced 10 case distinctions, treesize of input 89 treesize of output 82 [2022-11-22 02:01:41,355 WARN L718 sPolynomialRelations]: Constructing 512(two to the power of 9 dual juncts. [2022-11-22 02:01:41,438 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 10 proven. 190 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:01:41,438 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:01:44,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 149 treesize of output 129 [2022-11-22 02:01:44,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 10 select indices, 10 select index equivalence classes, 45 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 0 case distinctions, treesize of input 149 treesize of output 111 [2022-11-22 02:01:44,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 02:01:47,749 WARN L718 sPolynomialRelations]: Constructing 1024(two to the power of 10 dual juncts. [2022-11-22 02:01:47,764 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 0 proven. 200 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:01:47,764 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [745762160] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:01:47,764 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1962437843] [2022-11-22 02:01:47,765 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:01:47,766 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:01:47,766 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:01:47,766 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:01:47,766 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:01:47,799 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:01:47,801 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:01:47,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:01:47,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:01:47,906 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:47,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:48,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:48,065 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:01:48,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:01:48,124 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:01:50,973 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '30125#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:01:50,973 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:01:50,974 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:01:50,974 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 36, 36] total 96 [2022-11-22 02:01:50,974 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1158876215] [2022-11-22 02:01:50,974 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:01:50,974 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 96 states [2022-11-22 02:01:50,975 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:01:50,975 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 96 interpolants. [2022-11-22 02:01:50,975 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=958, Invalid=9962, Unknown=0, NotChecked=0, Total=10920 [2022-11-22 02:01:50,976 INFO L87 Difference]: Start difference. First operand 549 states and 633 transitions. Second operand has 96 states, 96 states have (on average 1.4479166666666667) internal successors, (139), 96 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:02:53,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:02:53,494 INFO L93 Difference]: Finished difference Result 1723 states and 1865 transitions. [2022-11-22 02:02:53,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 137 states. [2022-11-22 02:02:53,494 INFO L78 Accepts]: Start accepts. Automaton has has 96 states, 96 states have (on average 1.4479166666666667) internal successors, (139), 96 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-22 02:02:53,495 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:02:53,498 INFO L225 Difference]: With dead ends: 1723 [2022-11-22 02:02:53,498 INFO L226 Difference]: Without dead ends: 1701 [2022-11-22 02:02:53,501 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 300 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 238 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13864 ImplicationChecksByTransitivity, 67.1s TimeCoverageRelationStatistics Valid=7103, Invalid=50257, Unknown=0, NotChecked=0, Total=57360 [2022-11-22 02:02:53,501 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 4137 mSDsluCounter, 645 mSDsCounter, 0 mSdLazyCounter, 6191 mSolverCounterSat, 373 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4137 SdHoareTripleChecker+Valid, 662 SdHoareTripleChecker+Invalid, 6564 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 373 IncrementalHoareTripleChecker+Valid, 6191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:02:53,501 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4137 Valid, 662 Invalid, 6564 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [373 Valid, 6191 Invalid, 0 Unknown, 0 Unchecked, 6.0s Time] [2022-11-22 02:02:53,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1701 states. [2022-11-22 02:02:53,512 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1701 to 655. [2022-11-22 02:02:53,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 655 states, 652 states have (on average 1.1702453987730062) internal successors, (763), 654 states have internal predecessors, (763), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:02:53,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 655 states to 655 states and 763 transitions. [2022-11-22 02:02:53,515 INFO L78 Accepts]: Start accepts. Automaton has 655 states and 763 transitions. Word has length 47 [2022-11-22 02:02:53,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:02:53,515 INFO L495 AbstractCegarLoop]: Abstraction has 655 states and 763 transitions. [2022-11-22 02:02:53,515 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 96 states, 96 states have (on average 1.4479166666666667) internal successors, (139), 96 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:02:53,516 INFO L276 IsEmpty]: Start isEmpty. Operand 655 states and 763 transitions. [2022-11-22 02:02:53,517 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-22 02:02:53,517 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:02:53,517 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:02:53,526 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Forceful destruction successful, exit code 0 [2022-11-22 02:02:53,725 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-22 02:02:53,726 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:02:53,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:02:53,726 INFO L85 PathProgramCache]: Analyzing trace with hash 2079666015, now seen corresponding path program 11 times [2022-11-22 02:02:53,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:02:53,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1836898111] [2022-11-22 02:02:53,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:02:53,727 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:02:53,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:02:56,016 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 17 proven. 74 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:02:56,016 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:02:56,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1836898111] [2022-11-22 02:02:56,016 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1836898111] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:02:56,017 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [296754575] [2022-11-22 02:02:56,017 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:02:56,017 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:02:56,017 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:02:56,018 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:02:56,021 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-11-22 02:02:56,822 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-22 02:02:56,822 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:02:56,828 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 139 conjunts are in the unsatisfiable core [2022-11-22 02:02:56,832 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:02:56,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:02:57,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:02:57,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:02:58,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:02:58,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:02:58,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:02:58,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:02:59,009 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:02:59,011 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:02:59,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 02:02:59,015 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 19 proven. 72 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:02:59,016 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:02:59,030 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1755 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1755) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-22 02:03:05,795 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1755 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1755) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 02:03:05,804 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1755 (Array Int Int)) (v_ArrVal_1753 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1753) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1755) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 02:03:05,916 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1755 (Array Int Int)) (v_ArrVal_1752 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1752) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1755) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 02:03:05,926 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1755 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1755) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 02:03:06,019 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:03:06,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:03:06,027 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:03:06,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:03:06,036 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 02:03:07,169 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 26 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 29 not checked. [2022-11-22 02:03:07,169 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [296754575] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:03:07,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1026430948] [2022-11-22 02:03:07,171 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:03:07,171 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:03:07,171 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:03:07,171 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:03:07,171 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:03:07,208 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:03:07,210 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:03:07,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:03:07,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:03:07,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:07,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:03:07,368 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 02:03:07,369 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-11-22 02:03:07,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:07,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:07,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:07,578 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:03:07,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:03:07,679 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:03:07,736 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-22 02:03:07,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-22 02:03:07,851 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:03:07,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:03:07,958 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:03:07,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:03:08,004 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:03:12,195 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '33141#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:03:12,195 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:03:12,195 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:03:12,195 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 26, 26] total 77 [2022-11-22 02:03:12,196 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [663793020] [2022-11-22 02:03:12,196 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:03:12,196 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 77 states [2022-11-22 02:03:12,196 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:03:12,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 77 interpolants. [2022-11-22 02:03:12,197 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=454, Invalid=6839, Unknown=37, NotChecked=860, Total=8190 [2022-11-22 02:03:12,198 INFO L87 Difference]: Start difference. First operand 655 states and 763 transitions. Second operand has 77 states, 77 states have (on average 1.7012987012987013) internal successors, (131), 77 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:16,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:03:16,341 INFO L93 Difference]: Finished difference Result 695 states and 801 transitions. [2022-11-22 02:03:16,342 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-11-22 02:03:16,342 INFO L78 Accepts]: Start accepts. Automaton has has 77 states, 77 states have (on average 1.7012987012987013) internal successors, (131), 77 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 48 [2022-11-22 02:03:16,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:03:16,345 INFO L225 Difference]: With dead ends: 695 [2022-11-22 02:03:16,345 INFO L226 Difference]: Without dead ends: 655 [2022-11-22 02:03:16,346 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 212 GetRequests, 87 SyntacticMatches, 8 SemanticMatches, 117 ConstructedPredicates, 5 IntricatePredicates, 1 DeprecatedPredicates, 4648 ImplicationChecksByTransitivity, 16.8s TimeCoverageRelationStatistics Valid=971, Invalid=11893, Unknown=38, NotChecked=1140, Total=14042 [2022-11-22 02:03:16,346 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 153 mSDsluCounter, 266 mSDsCounter, 0 mSdLazyCounter, 2072 mSolverCounterSat, 60 mSolverCounterUnsat, 12 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 2476 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 2072 IncrementalHoareTripleChecker+Invalid, 12 IncrementalHoareTripleChecker+Unknown, 332 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-22 02:03:16,347 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [153 Valid, 275 Invalid, 2476 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 2072 Invalid, 12 Unknown, 332 Unchecked, 1.7s Time] [2022-11-22 02:03:16,347 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 655 states. [2022-11-22 02:03:16,353 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 655 to 655. [2022-11-22 02:03:16,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 655 states, 652 states have (on average 1.1671779141104295) internal successors, (761), 654 states have internal predecessors, (761), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:16,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 655 states to 655 states and 761 transitions. [2022-11-22 02:03:16,356 INFO L78 Accepts]: Start accepts. Automaton has 655 states and 761 transitions. Word has length 48 [2022-11-22 02:03:16,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:03:16,356 INFO L495 AbstractCegarLoop]: Abstraction has 655 states and 761 transitions. [2022-11-22 02:03:16,356 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 77 states, 77 states have (on average 1.7012987012987013) internal successors, (131), 77 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:16,357 INFO L276 IsEmpty]: Start isEmpty. Operand 655 states and 761 transitions. [2022-11-22 02:03:16,358 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-22 02:03:16,358 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:03:16,358 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 4, 4, 4, 4, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:03:16,366 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Forceful destruction successful, exit code 0 [2022-11-22 02:03:16,566 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:03:16,566 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:03:16,566 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:03:16,566 INFO L85 PathProgramCache]: Analyzing trace with hash -1133928103, now seen corresponding path program 9 times [2022-11-22 02:03:16,566 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:03:16,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1979840958] [2022-11-22 02:03:16,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:03:16,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:03:16,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:03:17,178 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 8 proven. 37 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-11-22 02:03:17,179 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:03:17,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1979840958] [2022-11-22 02:03:17,179 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1979840958] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:03:17,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [301578507] [2022-11-22 02:03:17,179 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:03:17,179 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:03:17,180 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:03:17,181 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:03:17,202 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-11-22 02:03:17,596 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:03:17,597 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:03:17,600 INFO L263 TraceCheckSpWp]: Trace formula consists of 389 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-22 02:03:17,602 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:03:18,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:18,098 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:03:18,100 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:03:18,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 02:03:18,104 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 13 proven. 32 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-11-22 02:03:18,104 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:03:18,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 02:03:18,118 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-22 02:03:18,689 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 20 proven. 25 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-11-22 02:03:18,689 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [301578507] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:03:18,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [212967349] [2022-11-22 02:03:18,690 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:03:18,690 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:03:18,690 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:03:18,691 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:03:18,691 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:03:18,740 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:03:18,742 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:03:18,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:03:18,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:03:18,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:18,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:18,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-22 02:03:18,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:18,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:19,106 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-22 02:03:19,107 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-22 02:03:19,315 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-22 02:03:19,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-22 02:03:19,992 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:03:19,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:03:20,082 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:03:20,082 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:03:20,180 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:03:20,180 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:03:20,236 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:03:23,955 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '34899#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:03:23,956 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:03:23,956 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:03:23,956 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 41 [2022-11-22 02:03:23,956 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [93065287] [2022-11-22 02:03:23,956 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:03:23,956 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-11-22 02:03:23,957 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:03:23,957 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-11-22 02:03:23,957 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=352, Invalid=2618, Unknown=0, NotChecked=0, Total=2970 [2022-11-22 02:03:23,958 INFO L87 Difference]: Start difference. First operand 655 states and 761 transitions. Second operand has 41 states, 41 states have (on average 1.975609756097561) internal successors, (81), 41 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:25,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:03:25,485 INFO L93 Difference]: Finished difference Result 683 states and 782 transitions. [2022-11-22 02:03:25,485 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-22 02:03:25,486 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 41 states have (on average 1.975609756097561) internal successors, (81), 41 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-22 02:03:25,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:03:25,489 INFO L225 Difference]: With dead ends: 683 [2022-11-22 02:03:25,489 INFO L226 Difference]: Without dead ends: 679 [2022-11-22 02:03:25,489 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1716 ImplicationChecksByTransitivity, 5.9s TimeCoverageRelationStatistics Valid=901, Invalid=4951, Unknown=0, NotChecked=0, Total=5852 [2022-11-22 02:03:25,490 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 444 mSDsluCounter, 208 mSDsCounter, 0 mSdLazyCounter, 429 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 444 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 453 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 429 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:03:25,491 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [444 Valid, 226 Invalid, 453 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 429 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:03:25,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 679 states. [2022-11-22 02:03:25,499 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 679 to 647. [2022-11-22 02:03:25,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 647 states, 644 states have (on average 1.1677018633540373) internal successors, (752), 646 states have internal predecessors, (752), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:25,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 647 states to 647 states and 752 transitions. [2022-11-22 02:03:25,501 INFO L78 Accepts]: Start accepts. Automaton has 647 states and 752 transitions. Word has length 49 [2022-11-22 02:03:25,501 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:03:25,501 INFO L495 AbstractCegarLoop]: Abstraction has 647 states and 752 transitions. [2022-11-22 02:03:25,501 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 41 states have (on average 1.975609756097561) internal successors, (81), 41 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:25,501 INFO L276 IsEmpty]: Start isEmpty. Operand 647 states and 752 transitions. [2022-11-22 02:03:25,503 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-22 02:03:25,503 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:03:25,503 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:03:25,515 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Forceful destruction successful, exit code 0 [2022-11-22 02:03:25,710 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable51 [2022-11-22 02:03:25,710 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:03:25,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:03:25,710 INFO L85 PathProgramCache]: Analyzing trace with hash 1500717565, now seen corresponding path program 10 times [2022-11-22 02:03:25,711 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:03:25,711 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [180145075] [2022-11-22 02:03:25,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:03:25,711 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:03:25,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:03:27,353 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 14 proven. 49 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-22 02:03:27,353 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:03:27,354 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [180145075] [2022-11-22 02:03:27,354 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [180145075] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:03:27,354 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1985868577] [2022-11-22 02:03:27,354 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:03:27,354 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:03:27,354 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:03:27,355 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:03:27,357 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-11-22 02:03:27,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:03:27,576 INFO L263 TraceCheckSpWp]: Trace formula consists of 380 conjuncts, 54 conjunts are in the unsatisfiable core [2022-11-22 02:03:27,578 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:03:28,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 02:03:28,678 INFO L321 Elim1Store]: treesize reduction 13, result has 48.0 percent of original size [2022-11-22 02:03:28,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 33 treesize of output 26 [2022-11-22 02:03:28,683 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-22 02:03:28,683 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:03:28,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-22 02:03:28,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 34 [2022-11-22 02:03:30,172 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 27 proven. 36 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-22 02:03:30,172 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1985868577] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:03:30,172 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [681151325] [2022-11-22 02:03:30,173 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:03:30,174 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:03:30,174 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:03:30,174 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:03:30,174 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:03:30,223 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:03:30,225 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:03:30,226 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:03:30,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:30,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:30,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:03:30,417 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 02:03:30,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-11-22 02:03:30,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:30,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:30,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:30,640 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:03:30,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:03:30,818 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:03:30,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:03:30,913 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:03:30,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:03:31,024 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:03:31,024 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:03:31,087 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:03:34,984 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '36630#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:03:34,984 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:03:34,984 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:03:34,984 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 20, 20] total 55 [2022-11-22 02:03:34,985 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1768885600] [2022-11-22 02:03:34,985 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:03:34,985 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-11-22 02:03:34,985 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:03:34,986 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-11-22 02:03:34,986 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=404, Invalid=4288, Unknown=0, NotChecked=0, Total=4692 [2022-11-22 02:03:34,986 INFO L87 Difference]: Start difference. First operand 647 states and 752 transitions. Second operand has 55 states, 55 states have (on average 1.709090909090909) internal successors, (94), 55 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:38,746 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:03:38,746 INFO L93 Difference]: Finished difference Result 742 states and 842 transitions. [2022-11-22 02:03:38,747 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-22 02:03:38,747 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 55 states have (on average 1.709090909090909) internal successors, (94), 55 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-22 02:03:38,747 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:03:38,749 INFO L225 Difference]: With dead ends: 742 [2022-11-22 02:03:38,750 INFO L226 Difference]: Without dead ends: 734 [2022-11-22 02:03:38,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 98 SyntacticMatches, 1 SemanticMatches, 94 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2708 ImplicationChecksByTransitivity, 9.1s TimeCoverageRelationStatistics Valid=1058, Invalid=8062, Unknown=0, NotChecked=0, Total=9120 [2022-11-22 02:03:38,751 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 527 mSDsluCounter, 382 mSDsCounter, 0 mSdLazyCounter, 1038 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 527 SdHoareTripleChecker+Valid, 410 SdHoareTripleChecker+Invalid, 1067 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 1038 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:03:38,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [527 Valid, 410 Invalid, 1067 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 1038 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-22 02:03:38,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 734 states. [2022-11-22 02:03:38,758 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 734 to 635. [2022-11-22 02:03:38,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 635 states, 632 states have (on average 1.1661392405063291) internal successors, (737), 634 states have internal predecessors, (737), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:38,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 635 states to 635 states and 737 transitions. [2022-11-22 02:03:38,761 INFO L78 Accepts]: Start accepts. Automaton has 635 states and 737 transitions. Word has length 49 [2022-11-22 02:03:38,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:03:38,761 INFO L495 AbstractCegarLoop]: Abstraction has 635 states and 737 transitions. [2022-11-22 02:03:38,761 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 55 states, 55 states have (on average 1.709090909090909) internal successors, (94), 55 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:38,761 INFO L276 IsEmpty]: Start isEmpty. Operand 635 states and 737 transitions. [2022-11-22 02:03:38,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-22 02:03:38,763 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:03:38,763 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:03:38,770 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Forceful destruction successful, exit code 0 [2022-11-22 02:03:38,969 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable52 [2022-11-22 02:03:38,970 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:03:38,970 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:03:38,970 INFO L85 PathProgramCache]: Analyzing trace with hash -571957022, now seen corresponding path program 12 times [2022-11-22 02:03:38,970 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:03:38,970 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [612340334] [2022-11-22 02:03:38,970 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:03:38,970 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:03:39,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:03:40,758 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 10 proven. 91 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:03:40,758 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:03:40,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [612340334] [2022-11-22 02:03:40,759 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [612340334] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:03:40,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1762030540] [2022-11-22 02:03:40,759 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:03:40,759 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:03:40,759 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:03:40,760 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:03:40,763 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-11-22 02:03:41,250 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:03:41,250 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:03:41,254 INFO L263 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 97 conjunts are in the unsatisfiable core [2022-11-22 02:03:41,257 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:03:41,262 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:03:41,657 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:41,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:03:41,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:03:42,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:03:42,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:03:42,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 02:03:42,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 02:03:42,197 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 10 proven. 56 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-22 02:03:42,197 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:03:42,398 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1982 (Array Int Int)) (v_ArrVal_1981 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1981) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1982) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 02:03:42,407 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1982 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1982) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 02:03:42,416 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1982 (Array Int Int)) (v_ArrVal_1980 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1980) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1982) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 02:03:42,425 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1982 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1982) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 02:03:42,434 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1982 (Array Int Int)) (v_ArrVal_1979 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1979) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1982) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 02:03:42,443 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1982 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1982) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-22 02:03:42,549 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:03:42,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:03:42,556 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:03:42,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:03:42,875 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 10 proven. 22 refuted. 0 times theorem prover too weak. 36 trivial. 34 not checked. [2022-11-22 02:03:42,875 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1762030540] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:03:42,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [44523587] [2022-11-22 02:03:42,876 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:03:42,876 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:03:42,876 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:03:42,877 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:03:42,877 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:03:42,913 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:03:42,916 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:03:42,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:03:42,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:03:43,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:43,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:43,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-22 02:03:43,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:43,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:03:43,262 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-22 02:03:43,262 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-22 02:03:43,425 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-22 02:03:43,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-22 02:03:44,261 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:03:44,266 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:03:44,377 INFO L321 Elim1Store]: treesize reduction 201, result has 26.9 percent of original size [2022-11-22 02:03:44,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1015 treesize of output 1041 [2022-11-22 02:03:45,675 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:03:45,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:03:45,793 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:03:45,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:03:45,870 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:03:50,757 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '38422#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:03:50,757 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:03:50,757 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:03:50,758 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 21, 21] total 53 [2022-11-22 02:03:50,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1822990315] [2022-11-22 02:03:50,758 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:03:50,758 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-11-22 02:03:50,758 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:03:50,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-11-22 02:03:50,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=233, Invalid=3414, Unknown=37, NotChecked=738, Total=4422 [2022-11-22 02:03:50,759 INFO L87 Difference]: Start difference. First operand 635 states and 737 transitions. Second operand has 53 states, 53 states have (on average 1.8867924528301887) internal successors, (100), 53 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:54,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:03:54,324 INFO L93 Difference]: Finished difference Result 913 states and 1054 transitions. [2022-11-22 02:03:54,324 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-22 02:03:54,325 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 53 states have (on average 1.8867924528301887) internal successors, (100), 53 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-22 02:03:54,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:03:54,327 INFO L225 Difference]: With dead ends: 913 [2022-11-22 02:03:54,327 INFO L226 Difference]: Without dead ends: 845 [2022-11-22 02:03:54,327 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 110 SyntacticMatches, 7 SemanticMatches, 88 ConstructedPredicates, 6 IntricatePredicates, 0 DeprecatedPredicates, 1584 ImplicationChecksByTransitivity, 8.9s TimeCoverageRelationStatistics Valid=482, Invalid=6477, Unknown=37, NotChecked=1014, Total=8010 [2022-11-22 02:03:54,328 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 312 mSDsluCounter, 570 mSDsCounter, 0 mSdLazyCounter, 1720 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 612 SdHoareTripleChecker+Invalid, 2351 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 1720 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 604 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-22 02:03:54,328 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [312 Valid, 612 Invalid, 2351 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 1720 Invalid, 0 Unknown, 604 Unchecked, 1.4s Time] [2022-11-22 02:03:54,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 845 states. [2022-11-22 02:03:54,337 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 845 to 774. [2022-11-22 02:03:54,338 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 774 states, 771 states have (on average 1.1776913099870299) internal successors, (908), 773 states have internal predecessors, (908), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:54,339 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 774 states to 774 states and 908 transitions. [2022-11-22 02:03:54,339 INFO L78 Accepts]: Start accepts. Automaton has 774 states and 908 transitions. Word has length 50 [2022-11-22 02:03:54,340 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:03:54,340 INFO L495 AbstractCegarLoop]: Abstraction has 774 states and 908 transitions. [2022-11-22 02:03:54,340 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 53 states have (on average 1.8867924528301887) internal successors, (100), 53 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:03:54,340 INFO L276 IsEmpty]: Start isEmpty. Operand 774 states and 908 transitions. [2022-11-22 02:03:54,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-22 02:03:54,342 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:03:54,342 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:03:54,355 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Forceful destruction successful, exit code 0 [2022-11-22 02:03:54,551 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable53,43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:03:54,551 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:03:54,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:03:54,551 INFO L85 PathProgramCache]: Analyzing trace with hash -346173862, now seen corresponding path program 11 times [2022-11-22 02:03:54,551 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:03:54,551 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1353360286] [2022-11-22 02:03:54,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:03:54,552 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:03:54,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:03:55,484 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 25 proven. 65 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:03:55,484 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:03:55,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1353360286] [2022-11-22 02:03:55,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1353360286] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:03:55,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1637070429] [2022-11-22 02:03:55,485 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:03:55,485 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:03:55,485 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:03:55,486 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:03:55,492 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-11-22 02:03:56,064 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 02:03:56,064 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:03:56,068 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 89 conjunts are in the unsatisfiable core [2022-11-22 02:03:56,070 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:03:56,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 02:03:57,193 INFO L321 Elim1Store]: treesize reduction 12, result has 79.7 percent of original size [2022-11-22 02:03:57,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 3 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 7 case distinctions, treesize of input 41 treesize of output 65 [2022-11-22 02:03:57,895 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 7 proven. 50 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2022-11-22 02:03:57,895 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:03:59,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 57 treesize of output 49 [2022-11-22 02:03:59,575 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:03:59,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 81 [2022-11-22 02:04:00,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 35 [2022-11-22 02:04:01,230 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 9 proven. 48 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2022-11-22 02:04:01,231 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1637070429] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:04:01,231 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [440037032] [2022-11-22 02:04:01,232 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:04:01,232 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:04:01,233 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:04:01,233 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:04:01,233 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:04:01,265 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:01,268 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:01,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:04:01,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:04:01,336 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:04:01,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:04:01,420 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 02:04:01,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-11-22 02:04:01,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:04:01,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:04:01,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:04:01,602 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:04:01,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:04:01,772 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:04:01,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:04:01,856 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:04:01,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:04:01,976 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:04:01,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:04:02,027 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:04:06,681 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '40535#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:04:06,681 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:04:06,682 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:04:06,682 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 21, 21] total 61 [2022-11-22 02:04:06,682 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1542655500] [2022-11-22 02:04:06,682 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:04:06,682 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-22 02:04:06,682 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:04:06,683 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-22 02:04:06,683 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=396, Invalid=5304, Unknown=0, NotChecked=0, Total=5700 [2022-11-22 02:04:06,683 INFO L87 Difference]: Start difference. First operand 774 states and 908 transitions. Second operand has 62 states, 61 states have (on average 2.0491803278688523) internal successors, (125), 62 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:04:39,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:04:39,583 INFO L93 Difference]: Finished difference Result 1076 states and 1213 transitions. [2022-11-22 02:04:39,583 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 172 states. [2022-11-22 02:04:39,583 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 61 states have (on average 2.0491803278688523) internal successors, (125), 62 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-22 02:04:39,584 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:04:39,585 INFO L225 Difference]: With dead ends: 1076 [2022-11-22 02:04:39,585 INFO L226 Difference]: Without dead ends: 987 [2022-11-22 02:04:39,588 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 98 SyntacticMatches, 0 SemanticMatches, 244 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17382 ImplicationChecksByTransitivity, 36.2s TimeCoverageRelationStatistics Valid=6389, Invalid=53881, Unknown=0, NotChecked=0, Total=60270 [2022-11-22 02:04:39,588 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 2050 mSDsluCounter, 316 mSDsCounter, 0 mSdLazyCounter, 5465 mSolverCounterSat, 282 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2050 SdHoareTripleChecker+Valid, 332 SdHoareTripleChecker+Invalid, 5747 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 282 IncrementalHoareTripleChecker+Valid, 5465 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:04:39,588 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2050 Valid, 332 Invalid, 5747 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [282 Valid, 5465 Invalid, 0 Unknown, 0 Unchecked, 5.1s Time] [2022-11-22 02:04:39,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 987 states. [2022-11-22 02:04:39,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 987 to 768. [2022-11-22 02:04:39,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 768 states, 765 states have (on average 1.1516339869281045) internal successors, (881), 767 states have internal predecessors, (881), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:04:39,614 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 768 states to 768 states and 881 transitions. [2022-11-22 02:04:39,614 INFO L78 Accepts]: Start accepts. Automaton has 768 states and 881 transitions. Word has length 51 [2022-11-22 02:04:39,614 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:04:39,614 INFO L495 AbstractCegarLoop]: Abstraction has 768 states and 881 transitions. [2022-11-22 02:04:39,615 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 61 states have (on average 2.0491803278688523) internal successors, (125), 62 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:04:39,615 INFO L276 IsEmpty]: Start isEmpty. Operand 768 states and 881 transitions. [2022-11-22 02:04:39,616 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-22 02:04:39,616 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:04:39,617 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:04:39,635 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Forceful destruction successful, exit code 0 [2022-11-22 02:04:39,824 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable54,44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:04:39,824 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:04:39,824 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:04:39,825 INFO L85 PathProgramCache]: Analyzing trace with hash 613890594, now seen corresponding path program 12 times [2022-11-22 02:04:39,825 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:04:39,825 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [3466991] [2022-11-22 02:04:39,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:04:39,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:04:39,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:04:40,993 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 49 proven. 107 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:04:40,993 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:04:40,993 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [3466991] [2022-11-22 02:04:40,993 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [3466991] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:04:40,993 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [365320590] [2022-11-22 02:04:40,993 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:04:40,994 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:04:40,994 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:04:40,995 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:04:41,006 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-11-22 02:04:41,328 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:04:41,328 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:04:41,332 INFO L263 TraceCheckSpWp]: Trace formula consists of 375 conjuncts, 93 conjunts are in the unsatisfiable core [2022-11-22 02:04:41,334 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:04:42,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 02:04:43,795 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,796 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,797 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,798 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,807 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,808 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,809 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,810 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,811 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,812 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,813 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,814 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,815 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,816 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,817 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,818 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:43,871 INFO L321 Elim1Store]: treesize reduction 35, result has 52.1 percent of original size [2022-11-22 02:04:43,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 81 treesize of output 72 [2022-11-22 02:04:43,874 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-22 02:04:43,944 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 16 proven. 138 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-22 02:04:43,944 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:04:45,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 103 [2022-11-22 02:04:45,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 28 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 89 [2022-11-22 02:04:48,325 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-22 02:04:48,328 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 73 proven. 81 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-22 02:04:48,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [365320590] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:04:48,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [498785158] [2022-11-22 02:04:48,330 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:04:48,330 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:04:48,330 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:04:48,330 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:04:48,330 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:04:48,363 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:48,366 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:04:48,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:04:48,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:04:48,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:04:48,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:04:48,519 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-22 02:04:48,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:04:48,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:04:48,686 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-22 02:04:48,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-22 02:04:48,880 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-22 02:04:48,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-22 02:04:49,505 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:04:49,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:04:49,594 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:04:49,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:04:49,708 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:04:49,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:04:49,764 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:04:55,247 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '43117#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:04:55,247 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:04:55,247 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:04:55,247 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 31, 31] total 84 [2022-11-22 02:04:55,247 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2054646230] [2022-11-22 02:04:55,247 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:04:55,248 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 84 states [2022-11-22 02:04:55,248 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:04:55,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 84 interpolants. [2022-11-22 02:04:55,249 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=621, Invalid=8885, Unknown=0, NotChecked=0, Total=9506 [2022-11-22 02:04:55,249 INFO L87 Difference]: Start difference. First operand 768 states and 881 transitions. Second operand has 84 states, 84 states have (on average 1.6666666666666667) internal successors, (140), 84 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:05:43,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:05:43,336 INFO L93 Difference]: Finished difference Result 1482 states and 1596 transitions. [2022-11-22 02:05:43,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 150 states. [2022-11-22 02:05:43,336 INFO L78 Accepts]: Start accepts. Automaton has has 84 states, 84 states have (on average 1.6666666666666667) internal successors, (140), 84 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-22 02:05:43,336 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:05:43,339 INFO L225 Difference]: With dead ends: 1482 [2022-11-22 02:05:43,339 INFO L226 Difference]: Without dead ends: 1390 [2022-11-22 02:05:43,341 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 324 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 244 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15377 ImplicationChecksByTransitivity, 53.2s TimeCoverageRelationStatistics Valid=7483, Invalid=52787, Unknown=0, NotChecked=0, Total=60270 [2022-11-22 02:05:43,342 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 2488 mSDsluCounter, 554 mSDsCounter, 0 mSdLazyCounter, 6730 mSolverCounterSat, 111 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2488 SdHoareTripleChecker+Valid, 572 SdHoareTripleChecker+Invalid, 6841 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 111 IncrementalHoareTripleChecker+Valid, 6730 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:05:43,342 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2488 Valid, 572 Invalid, 6841 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [111 Valid, 6730 Invalid, 0 Unknown, 0 Unchecked, 6.1s Time] [2022-11-22 02:05:43,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1390 states. [2022-11-22 02:05:43,353 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1390 to 805. [2022-11-22 02:05:43,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 805 states, 802 states have (on average 1.1359102244389028) internal successors, (911), 804 states have internal predecessors, (911), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:05:43,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 805 states to 805 states and 911 transitions. [2022-11-22 02:05:43,355 INFO L78 Accepts]: Start accepts. Automaton has 805 states and 911 transitions. Word has length 51 [2022-11-22 02:05:43,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:05:43,355 INFO L495 AbstractCegarLoop]: Abstraction has 805 states and 911 transitions. [2022-11-22 02:05:43,355 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 84 states, 84 states have (on average 1.6666666666666667) internal successors, (140), 84 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:05:43,355 INFO L276 IsEmpty]: Start isEmpty. Operand 805 states and 911 transitions. [2022-11-22 02:05:43,356 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-22 02:05:43,357 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:05:43,357 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 11, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:05:43,371 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Ended with exit code 0 [2022-11-22 02:05:43,563 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable55,45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:05:43,563 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:05:43,563 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:05:43,563 INFO L85 PathProgramCache]: Analyzing trace with hash 1192453680, now seen corresponding path program 12 times [2022-11-22 02:05:43,564 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:05:43,564 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1143586910] [2022-11-22 02:05:43,564 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:05:43,564 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:05:43,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:05:44,757 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 81 proven. 161 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:05:44,757 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:05:44,757 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1143586910] [2022-11-22 02:05:44,758 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1143586910] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:05:44,758 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [927243987] [2022-11-22 02:05:44,758 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:05:44,758 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:05:44,758 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:05:44,759 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:05:44,762 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-11-22 02:05:44,994 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:05:44,994 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:05:44,998 INFO L263 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 111 conjunts are in the unsatisfiable core [2022-11-22 02:05:45,000 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:05:45,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 02:05:48,864 INFO L321 Elim1Store]: treesize reduction 45, result has 49.4 percent of original size [2022-11-22 02:05:48,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 12 select indices, 12 select index equivalence classes, 55 disjoint index pairs (out of 66 index pairs), introduced 12 new quantified variables, introduced 66 case distinctions, treesize of input 97 treesize of output 90 [2022-11-22 02:05:48,867 WARN L718 sPolynomialRelations]: Constructing 1024(two to the power of 10 dual juncts. [2022-11-22 02:05:48,973 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 11 proven. 231 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:05:48,973 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:05:52,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 164 treesize of output 142 [2022-11-22 02:05:52,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 11 select indices, 11 select index equivalence classes, 55 disjoint index pairs (out of 55 index pairs), introduced 11 new quantified variables, introduced 0 case distinctions, treesize of input 164 treesize of output 122 [2022-11-22 02:05:57,186 WARN L718 sPolynomialRelations]: Constructing 2048(two to the power of 11 dual juncts. [2022-11-22 02:05:57,222 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 121 proven. 121 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:05:57,222 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [927243987] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:05:57,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [931149786] [2022-11-22 02:05:57,223 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:05:57,223 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:05:57,223 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:05:57,223 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:05:57,223 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:05:57,262 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:05:57,265 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:05:57,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:05:57,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:05:57,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:05:57,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:05:57,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:05:57,575 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:05:57,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:05:57,674 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:06:01,415 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '46116#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:06:01,415 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:06:01,415 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:06:01,415 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 39, 39] total 102 [2022-11-22 02:06:01,415 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [232599370] [2022-11-22 02:06:01,416 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:06:01,416 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 102 states [2022-11-22 02:06:01,416 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:06:01,417 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 102 interpolants. [2022-11-22 02:06:01,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=877, Invalid=11333, Unknown=0, NotChecked=0, Total=12210 [2022-11-22 02:06:01,418 INFO L87 Difference]: Start difference. First operand 805 states and 911 transitions. Second operand has 102 states, 102 states have (on average 1.4607843137254901) internal successors, (149), 102 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:07:32,017 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:07:32,017 INFO L93 Difference]: Finished difference Result 2131 states and 2302 transitions. [2022-11-22 02:07:32,017 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 194 states. [2022-11-22 02:07:32,018 INFO L78 Accepts]: Start accepts. Automaton has has 102 states, 102 states have (on average 1.4607843137254901) internal successors, (149), 102 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-22 02:07:32,018 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:07:32,021 INFO L225 Difference]: With dead ends: 2131 [2022-11-22 02:07:32,022 INFO L226 Difference]: Without dead ends: 2107 [2022-11-22 02:07:32,025 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 371 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 301 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25145 ImplicationChecksByTransitivity, 94.2s TimeCoverageRelationStatistics Valid=9332, Invalid=82174, Unknown=0, NotChecked=0, Total=91506 [2022-11-22 02:07:32,025 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 4085 mSDsluCounter, 538 mSDsCounter, 0 mSdLazyCounter, 8725 mSolverCounterSat, 153 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4085 SdHoareTripleChecker+Valid, 556 SdHoareTripleChecker+Invalid, 8878 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 153 IncrementalHoareTripleChecker+Valid, 8725 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.7s IncrementalHoareTripleChecker+Time [2022-11-22 02:07:32,026 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4085 Valid, 556 Invalid, 8878 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [153 Valid, 8725 Invalid, 0 Unknown, 0 Unchecked, 9.7s Time] [2022-11-22 02:07:32,028 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2107 states. [2022-11-22 02:07:32,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2107 to 945. [2022-11-22 02:07:32,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 945 states, 942 states have (on average 1.1475583864118897) internal successors, (1081), 944 states have internal predecessors, (1081), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:07:32,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 945 states to 945 states and 1081 transitions. [2022-11-22 02:07:32,042 INFO L78 Accepts]: Start accepts. Automaton has 945 states and 1081 transitions. Word has length 51 [2022-11-22 02:07:32,042 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:07:32,042 INFO L495 AbstractCegarLoop]: Abstraction has 945 states and 1081 transitions. [2022-11-22 02:07:32,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 102 states, 102 states have (on average 1.4607843137254901) internal successors, (149), 102 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:07:32,043 INFO L276 IsEmpty]: Start isEmpty. Operand 945 states and 1081 transitions. [2022-11-22 02:07:32,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-22 02:07:32,044 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:07:32,044 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:07:32,051 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Ended with exit code 0 [2022-11-22 02:07:32,244 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 46 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable56 [2022-11-22 02:07:32,244 INFO L420 AbstractCegarLoop]: === Iteration 58 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:07:32,245 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:07:32,245 INFO L85 PathProgramCache]: Analyzing trace with hash 1847398223, now seen corresponding path program 13 times [2022-11-22 02:07:32,245 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:07:32,245 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1467543126] [2022-11-22 02:07:32,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:07:32,245 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:07:32,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:07:32,884 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 9 proven. 66 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-22 02:07:32,885 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:07:32,885 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1467543126] [2022-11-22 02:07:32,885 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1467543126] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:07:32,885 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1524354852] [2022-11-22 02:07:32,885 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:07:32,885 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:07:32,886 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:07:32,887 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:07:32,922 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-11-22 02:07:33,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:07:33,187 INFO L263 TraceCheckSpWp]: Trace formula consists of 418 conjuncts, 60 conjunts are in the unsatisfiable core [2022-11-22 02:07:33,189 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:07:33,540 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-22 02:07:33,540 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:07:33,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:07:34,106 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-22 02:07:34,106 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1524354852] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:07:34,106 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1894554086] [2022-11-22 02:07:34,107 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:07:34,107 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:07:34,107 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:07:34,108 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:07:34,108 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:07:34,146 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:07:34,148 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:07:34,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:07:34,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:07:34,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:07:34,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:07:34,306 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-22 02:07:34,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:07:34,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:07:34,478 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-22 02:07:34,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-22 02:07:34,714 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-22 02:07:34,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-22 02:07:35,575 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:07:35,579 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:07:35,714 INFO L321 Elim1Store]: treesize reduction 201, result has 26.9 percent of original size [2022-11-22 02:07:35,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1021 treesize of output 1033 [2022-11-22 02:07:37,273 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:07:37,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:07:37,400 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:07:37,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:07:37,496 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:07:42,748 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '49926#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:07:42,748 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:07:42,748 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:07:42,749 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 34 [2022-11-22 02:07:42,749 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1985579627] [2022-11-22 02:07:42,749 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:07:42,749 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-22 02:07:42,749 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:07:42,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-22 02:07:42,750 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=215, Invalid=2137, Unknown=0, NotChecked=0, Total=2352 [2022-11-22 02:07:42,750 INFO L87 Difference]: Start difference. First operand 945 states and 1081 transitions. Second operand has 35 states, 34 states have (on average 2.6176470588235294) internal successors, (89), 35 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:07:44,405 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:07:44,405 INFO L93 Difference]: Finished difference Result 1053 states and 1180 transitions. [2022-11-22 02:07:44,405 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-22 02:07:44,405 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.6176470588235294) internal successors, (89), 35 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-22 02:07:44,406 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:07:44,408 INFO L225 Difference]: With dead ends: 1053 [2022-11-22 02:07:44,408 INFO L226 Difference]: Without dead ends: 1053 [2022-11-22 02:07:44,408 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 117 SyntacticMatches, 6 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1159 ImplicationChecksByTransitivity, 7.0s TimeCoverageRelationStatistics Valid=621, Invalid=3935, Unknown=0, NotChecked=0, Total=4556 [2022-11-22 02:07:44,409 INFO L413 NwaCegarLoop]: 22 mSDtfsCounter, 351 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 897 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 351 SdHoareTripleChecker+Valid, 271 SdHoareTripleChecker+Invalid, 911 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 897 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-22 02:07:44,409 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [351 Valid, 271 Invalid, 911 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 897 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-22 02:07:44,410 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1053 states. [2022-11-22 02:07:44,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1053 to 971. [2022-11-22 02:07:44,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 971 states, 968 states have (on average 1.1435950413223142) internal successors, (1107), 970 states have internal predecessors, (1107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:07:44,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 971 states to 971 states and 1107 transitions. [2022-11-22 02:07:44,427 INFO L78 Accepts]: Start accepts. Automaton has 971 states and 1107 transitions. Word has length 52 [2022-11-22 02:07:44,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:07:44,427 INFO L495 AbstractCegarLoop]: Abstraction has 971 states and 1107 transitions. [2022-11-22 02:07:44,427 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.6176470588235294) internal successors, (89), 35 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:07:44,427 INFO L276 IsEmpty]: Start isEmpty. Operand 971 states and 1107 transitions. [2022-11-22 02:07:44,429 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-22 02:07:44,429 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:07:44,430 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 9, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:07:44,437 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Forceful destruction successful, exit code 0 [2022-11-22 02:07:44,637 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 47 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a57064c-72a4-424b-951e-279026141fc3/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable57 [2022-11-22 02:07:44,637 INFO L420 AbstractCegarLoop]: === Iteration 59 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:07:44,638 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:07:44,638 INFO L85 PathProgramCache]: Analyzing trace with hash -793561896, now seen corresponding path program 13 times [2022-11-22 02:07:44,638 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:07:44,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [955507386] [2022-11-22 02:07:44,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:07:44,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:07:44,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat