./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d8697c629a22dee8b5a51c26261db89d3e1115a5e0c1bc03fd54c09ffc3b9b0d --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-22 01:14:25,193 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-22 01:14:25,196 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-22 01:14:25,225 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-22 01:14:25,228 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-22 01:14:25,232 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-22 01:14:25,234 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-22 01:14:25,238 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-22 01:14:25,240 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-22 01:14:25,246 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-22 01:14:25,247 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-22 01:14:25,249 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-22 01:14:25,249 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-22 01:14:25,254 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-22 01:14:25,256 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-22 01:14:25,258 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-22 01:14:25,260 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-22 01:14:25,261 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-22 01:14:25,263 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-22 01:14:25,269 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-22 01:14:25,270 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-22 01:14:25,273 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-22 01:14:25,274 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-22 01:14:25,275 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-22 01:14:25,283 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-22 01:14:25,284 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-22 01:14:25,285 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-22 01:14:25,286 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-22 01:14:25,287 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-22 01:14:25,290 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-22 01:14:25,291 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-22 01:14:25,291 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-22 01:14:25,293 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-22 01:14:25,294 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-22 01:14:25,296 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-22 01:14:25,296 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-22 01:14:25,297 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-22 01:14:25,297 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-22 01:14:25,297 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-22 01:14:25,299 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-22 01:14:25,299 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-22 01:14:25,300 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-22 01:14:25,335 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-22 01:14:25,336 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-22 01:14:25,337 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-22 01:14:25,337 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-22 01:14:25,338 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-22 01:14:25,338 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-22 01:14:25,338 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-22 01:14:25,339 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-22 01:14:25,339 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-22 01:14:25,339 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-22 01:14:25,340 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-22 01:14:25,341 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-22 01:14:25,341 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-22 01:14:25,341 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-22 01:14:25,341 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-22 01:14:25,342 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-22 01:14:25,342 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-22 01:14:25,342 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-22 01:14:25,343 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-22 01:14:25,343 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-22 01:14:25,344 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-22 01:14:25,344 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-22 01:14:25,344 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-22 01:14:25,344 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-22 01:14:25,345 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-22 01:14:25,345 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-22 01:14:25,346 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-22 01:14:25,346 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-22 01:14:25,346 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-22 01:14:25,347 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-22 01:14:25,347 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-22 01:14:25,347 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-22 01:14:25,347 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-22 01:14:25,348 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-22 01:14:25,348 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-22 01:14:25,348 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 01:14:25,349 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-22 01:14:25,349 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-22 01:14:25,349 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-22 01:14:25,349 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-22 01:14:25,350 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-22 01:14:25,350 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-22 01:14:25,350 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d8697c629a22dee8b5a51c26261db89d3e1115a5e0c1bc03fd54c09ffc3b9b0d [2022-11-22 01:14:25,669 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-22 01:14:25,691 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-22 01:14:25,694 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-22 01:14:25,695 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-22 01:14:25,698 INFO L275 PluginConnector]: CDTParser initialized [2022-11-22 01:14:25,700 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/../../sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i [2022-11-22 01:14:28,746 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-22 01:14:28,967 INFO L351 CDTParser]: Found 1 translation units. [2022-11-22 01:14:28,967 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i [2022-11-22 01:14:28,986 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/data/6be7107f3/ebaace862e334295a8681eff74b10aa9/FLAG6e633c297 [2022-11-22 01:14:29,045 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/data/6be7107f3/ebaace862e334295a8681eff74b10aa9 [2022-11-22 01:14:29,048 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-22 01:14:29,052 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-22 01:14:29,059 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-22 01:14:29,059 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-22 01:14:29,063 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-22 01:14:29,067 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,068 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@12c0ab84 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29, skipping insertion in model container [2022-11-22 01:14:29,068 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,085 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-22 01:14:29,120 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-22 01:14:29,485 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 01:14:29,499 INFO L203 MainTranslator]: Completed pre-run [2022-11-22 01:14:29,555 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 01:14:29,584 INFO L208 MainTranslator]: Completed translation [2022-11-22 01:14:29,585 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29 WrapperNode [2022-11-22 01:14:29,585 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-22 01:14:29,586 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-22 01:14:29,587 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-22 01:14:29,587 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-22 01:14:29,594 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,612 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,642 INFO L138 Inliner]: procedures = 117, calls = 18, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 107 [2022-11-22 01:14:29,643 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-22 01:14:29,644 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-22 01:14:29,644 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-22 01:14:29,644 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-22 01:14:29,654 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,655 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,665 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,665 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,671 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,675 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,676 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,678 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,680 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-22 01:14:29,681 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-22 01:14:29,681 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-22 01:14:29,682 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-22 01:14:29,683 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (1/1) ... [2022-11-22 01:14:29,691 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 01:14:29,707 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:14:29,721 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-22 01:14:29,722 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-22 01:14:29,770 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-22 01:14:29,770 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-22 01:14:29,770 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-22 01:14:29,771 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-22 01:14:29,771 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-22 01:14:29,771 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-22 01:14:29,892 INFO L235 CfgBuilder]: Building ICFG [2022-11-22 01:14:29,894 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-22 01:14:30,246 INFO L276 CfgBuilder]: Performing block encoding [2022-11-22 01:14:30,314 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-22 01:14:30,314 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-22 01:14:30,317 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 01:14:30 BoogieIcfgContainer [2022-11-22 01:14:30,317 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-22 01:14:30,320 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-22 01:14:30,320 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-22 01:14:30,324 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-22 01:14:30,324 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.11 01:14:29" (1/3) ... [2022-11-22 01:14:30,325 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4202678c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 01:14:30, skipping insertion in model container [2022-11-22 01:14:30,325 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:14:29" (2/3) ... [2022-11-22 01:14:30,326 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4202678c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 01:14:30, skipping insertion in model container [2022-11-22 01:14:30,326 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 01:14:30" (3/3) ... [2022-11-22 01:14:30,327 INFO L112 eAbstractionObserver]: Analyzing ICFG cstrncat-alloca-2.i [2022-11-22 01:14:30,348 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-22 01:14:30,348 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 19 error locations. [2022-11-22 01:14:30,397 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-22 01:14:30,404 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@32aaf409, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-22 01:14:30,404 INFO L358 AbstractCegarLoop]: Starting to check reachability of 19 error locations. [2022-11-22 01:14:30,409 INFO L276 IsEmpty]: Start isEmpty. Operand has 40 states, 20 states have (on average 2.4) internal successors, (48), 39 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:30,415 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-22 01:14:30,415 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:30,416 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-22 01:14:30,417 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:30,422 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:30,423 INFO L85 PathProgramCache]: Analyzing trace with hash 169012, now seen corresponding path program 1 times [2022-11-22 01:14:30,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:30,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [405701072] [2022-11-22 01:14:30,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:30,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:30,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:30,588 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:30,589 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:30,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [405701072] [2022-11-22 01:14:30,590 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [405701072] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:30,590 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:30,590 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-22 01:14:30,592 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [470725167] [2022-11-22 01:14:30,593 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:30,598 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 01:14:30,598 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:30,626 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 01:14:30,626 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:14:30,629 INFO L87 Difference]: Start difference. First operand has 40 states, 20 states have (on average 2.4) internal successors, (48), 39 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:30,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:30,708 INFO L93 Difference]: Finished difference Result 41 states and 47 transitions. [2022-11-22 01:14:30,709 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 01:14:30,711 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-22 01:14:30,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:30,733 INFO L225 Difference]: With dead ends: 41 [2022-11-22 01:14:30,733 INFO L226 Difference]: Without dead ends: 39 [2022-11-22 01:14:30,735 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:14:30,738 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 1 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 56 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:30,740 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 56 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:14:30,759 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2022-11-22 01:14:30,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2022-11-22 01:14:30,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 20 states have (on average 2.2) internal successors, (44), 38 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:30,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 44 transitions. [2022-11-22 01:14:30,775 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 44 transitions. Word has length 3 [2022-11-22 01:14:30,775 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:30,776 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 44 transitions. [2022-11-22 01:14:30,776 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:30,776 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 44 transitions. [2022-11-22 01:14:30,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 01:14:30,777 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:30,777 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 01:14:30,777 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-22 01:14:30,778 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:30,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:30,779 INFO L85 PathProgramCache]: Analyzing trace with hash 5238508, now seen corresponding path program 1 times [2022-11-22 01:14:30,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:30,779 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1606570278] [2022-11-22 01:14:30,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:30,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:30,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:31,105 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:31,106 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:31,106 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1606570278] [2022-11-22 01:14:31,106 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1606570278] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:31,106 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:31,107 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 01:14:31,107 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1510715922] [2022-11-22 01:14:31,107 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:31,108 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 01:14:31,109 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:31,109 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 01:14:31,110 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:14:31,110 INFO L87 Difference]: Start difference. First operand 39 states and 44 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:31,156 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:31,157 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-11-22 01:14:31,157 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 01:14:31,157 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 01:14:31,158 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:31,158 INFO L225 Difference]: With dead ends: 37 [2022-11-22 01:14:31,158 INFO L226 Difference]: Without dead ends: 37 [2022-11-22 01:14:31,159 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:14:31,160 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:31,161 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 20 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:14:31,162 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-22 01:14:31,165 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 37. [2022-11-22 01:14:31,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 20 states have (on average 2.1) internal successors, (42), 36 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:31,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 42 transitions. [2022-11-22 01:14:31,166 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 42 transitions. Word has length 4 [2022-11-22 01:14:31,167 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:31,167 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 42 transitions. [2022-11-22 01:14:31,167 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:31,167 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 42 transitions. [2022-11-22 01:14:31,168 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 01:14:31,168 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:31,168 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 01:14:31,168 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-22 01:14:31,169 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:31,170 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:31,172 INFO L85 PathProgramCache]: Analyzing trace with hash 5238509, now seen corresponding path program 1 times [2022-11-22 01:14:31,172 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:31,173 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1065900957] [2022-11-22 01:14:31,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:31,174 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:31,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:31,752 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:31,752 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:31,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1065900957] [2022-11-22 01:14:31,753 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1065900957] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:31,753 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:31,753 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:14:31,753 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2116167023] [2022-11-22 01:14:31,753 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:31,754 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:14:31,754 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:31,754 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:14:31,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:14:31,755 INFO L87 Difference]: Start difference. First operand 37 states and 42 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:32,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:32,015 INFO L93 Difference]: Finished difference Result 71 states and 81 transitions. [2022-11-22 01:14:32,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:14:32,015 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 01:14:32,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:32,019 INFO L225 Difference]: With dead ends: 71 [2022-11-22 01:14:32,020 INFO L226 Difference]: Without dead ends: 71 [2022-11-22 01:14:32,021 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-22 01:14:32,025 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 147 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 70 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 55 SdHoareTripleChecker+Invalid, 71 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 70 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:32,025 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [147 Valid, 55 Invalid, 71 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 70 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:14:32,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-11-22 01:14:32,029 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 39. [2022-11-22 01:14:32,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 22 states have (on average 2.0454545454545454) internal successors, (45), 38 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:32,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 45 transitions. [2022-11-22 01:14:32,031 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 45 transitions. Word has length 4 [2022-11-22 01:14:32,031 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:32,031 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 45 transitions. [2022-11-22 01:14:32,032 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:32,032 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 45 transitions. [2022-11-22 01:14:32,032 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 01:14:32,032 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:32,033 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 01:14:32,033 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-22 01:14:32,033 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:32,034 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:32,038 INFO L85 PathProgramCache]: Analyzing trace with hash 162495202, now seen corresponding path program 1 times [2022-11-22 01:14:32,039 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:32,039 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1762866363] [2022-11-22 01:14:32,039 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:32,039 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:32,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:32,084 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:32,084 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:32,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1762866363] [2022-11-22 01:14:32,084 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1762866363] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:32,085 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:32,085 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 01:14:32,085 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [929015500] [2022-11-22 01:14:32,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:32,085 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 01:14:32,086 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:32,086 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 01:14:32,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:14:32,087 INFO L87 Difference]: Start difference. First operand 39 states and 45 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:32,126 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:32,127 INFO L93 Difference]: Finished difference Result 37 states and 43 transitions. [2022-11-22 01:14:32,127 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 01:14:32,127 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 01:14:32,127 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:32,128 INFO L225 Difference]: With dead ends: 37 [2022-11-22 01:14:32,128 INFO L226 Difference]: Without dead ends: 37 [2022-11-22 01:14:32,129 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:14:32,137 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 34 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:32,141 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 20 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:14:32,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-22 01:14:32,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 37. [2022-11-22 01:14:32,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 22 states have (on average 1.9545454545454546) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:32,148 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-22 01:14:32,148 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 5 [2022-11-22 01:14:32,149 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:32,149 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-22 01:14:32,149 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:32,149 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-22 01:14:32,149 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 01:14:32,150 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:32,150 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 01:14:32,150 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-22 01:14:32,150 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:32,151 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:32,151 INFO L85 PathProgramCache]: Analyzing trace with hash 162495203, now seen corresponding path program 1 times [2022-11-22 01:14:32,151 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:32,151 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1783146896] [2022-11-22 01:14:32,151 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:32,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:32,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:32,229 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:32,229 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:32,230 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1783146896] [2022-11-22 01:14:32,230 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1783146896] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:32,230 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:32,230 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 01:14:32,231 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1346903668] [2022-11-22 01:14:32,231 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:32,231 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 01:14:32,232 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:32,232 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 01:14:32,233 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:14:32,233 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 4 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:32,312 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:32,313 INFO L93 Difference]: Finished difference Result 65 states and 74 transitions. [2022-11-22 01:14:32,313 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:14:32,313 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 01:14:32,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:32,319 INFO L225 Difference]: With dead ends: 65 [2022-11-22 01:14:32,319 INFO L226 Difference]: Without dead ends: 65 [2022-11-22 01:14:32,320 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:14:32,322 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 64 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 80 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:32,323 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 80 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:14:32,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-22 01:14:32,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 38. [2022-11-22 01:14:32,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 23 states have (on average 1.9130434782608696) internal successors, (44), 37 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:32,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 44 transitions. [2022-11-22 01:14:32,332 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 44 transitions. Word has length 5 [2022-11-22 01:14:32,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:32,333 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 44 transitions. [2022-11-22 01:14:32,333 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:32,339 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 44 transitions. [2022-11-22 01:14:32,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 01:14:32,342 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:32,343 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 01:14:32,343 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-22 01:14:32,343 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:32,344 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:32,344 INFO L85 PathProgramCache]: Analyzing trace with hash 162498002, now seen corresponding path program 1 times [2022-11-22 01:14:32,344 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:32,344 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1747839450] [2022-11-22 01:14:32,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:32,344 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:32,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:32,811 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:32,811 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:32,812 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1747839450] [2022-11-22 01:14:32,812 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1747839450] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:32,812 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:32,812 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:14:32,812 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [709875725] [2022-11-22 01:14:32,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:32,813 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:14:32,813 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:32,813 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:14:32,814 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:14:32,814 INFO L87 Difference]: Start difference. First operand 38 states and 44 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:33,032 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:33,033 INFO L93 Difference]: Finished difference Result 64 states and 73 transitions. [2022-11-22 01:14:33,034 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:14:33,034 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 01:14:33,034 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:33,035 INFO L225 Difference]: With dead ends: 64 [2022-11-22 01:14:33,035 INFO L226 Difference]: Without dead ends: 64 [2022-11-22 01:14:33,035 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-22 01:14:33,036 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 133 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 133 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 49 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:33,036 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [133 Valid, 32 Invalid, 49 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:14:33,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2022-11-22 01:14:33,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 39. [2022-11-22 01:14:33,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 24 states have (on average 1.875) internal successors, (45), 38 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:33,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 45 transitions. [2022-11-22 01:14:33,040 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 45 transitions. Word has length 5 [2022-11-22 01:14:33,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:33,040 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 45 transitions. [2022-11-22 01:14:33,040 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:33,041 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 45 transitions. [2022-11-22 01:14:33,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-22 01:14:33,041 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:33,041 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-22 01:14:33,041 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-22 01:14:33,042 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:33,042 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:33,042 INFO L85 PathProgramCache]: Analyzing trace with hash 739335090, now seen corresponding path program 1 times [2022-11-22 01:14:33,048 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:33,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1680214742] [2022-11-22 01:14:33,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:33,049 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:33,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:33,506 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:33,506 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:33,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1680214742] [2022-11-22 01:14:33,507 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1680214742] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:14:33,507 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [226903105] [2022-11-22 01:14:33,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:33,507 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:14:33,507 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:14:33,513 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:14:33,523 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-22 01:14:33,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:33,602 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 21 conjunts are in the unsatisfiable core [2022-11-22 01:14:33,616 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:14:33,793 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:33,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:14:33,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:14:34,003 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:34,004 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:14:34,199 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:14:34,225 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:34,226 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [226903105] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:14:34,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1571512895] [2022-11-22 01:14:34,248 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-22 01:14:34,248 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:14:34,252 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:14:34,265 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:14:34,266 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:14:34,360 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:34,363 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:34,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:14:34,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:14:34,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:14:34,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:14:34,645 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:14:35,109 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '665#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:14:35,109 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:14:35,110 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:14:35,110 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 4, 4] total 13 [2022-11-22 01:14:35,110 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [232501464] [2022-11-22 01:14:35,110 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:14:35,111 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-11-22 01:14:35,111 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:35,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-11-22 01:14:35,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=265, Unknown=0, NotChecked=0, Total=342 [2022-11-22 01:14:35,113 INFO L87 Difference]: Start difference. First operand 39 states and 45 transitions. Second operand has 15 states, 14 states have (on average 1.2857142857142858) internal successors, (18), 14 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:35,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:35,588 INFO L93 Difference]: Finished difference Result 94 states and 108 transitions. [2022-11-22 01:14:35,589 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-22 01:14:35,589 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 1.2857142857142858) internal successors, (18), 14 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-22 01:14:35,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:35,590 INFO L225 Difference]: With dead ends: 94 [2022-11-22 01:14:35,590 INFO L226 Difference]: Without dead ends: 94 [2022-11-22 01:14:35,591 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=126, Invalid=380, Unknown=0, NotChecked=0, Total=506 [2022-11-22 01:14:35,591 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 377 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 245 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 377 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 254 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 245 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:35,592 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [377 Valid, 188 Invalid, 254 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 245 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:14:35,592 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-22 01:14:35,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 37. [2022-11-22 01:14:35,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 23 states have (on average 1.8695652173913044) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:35,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-22 01:14:35,595 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 6 [2022-11-22 01:14:35,595 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:35,596 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-22 01:14:35,596 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 1.2857142857142858) internal successors, (18), 14 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:35,596 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-22 01:14:35,596 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-22 01:14:35,596 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:35,596 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-22 01:14:35,608 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-22 01:14:35,802 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:14:35,803 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:35,803 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:35,803 INFO L85 PathProgramCache]: Analyzing trace with hash 742470770, now seen corresponding path program 1 times [2022-11-22 01:14:35,803 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:35,803 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1261001155] [2022-11-22 01:14:35,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:35,804 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:35,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:36,014 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:36,015 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:36,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1261001155] [2022-11-22 01:14:36,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1261001155] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:36,015 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:36,016 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:14:36,016 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [369071513] [2022-11-22 01:14:36,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:36,016 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:14:36,016 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:36,017 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:14:36,017 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:14:36,017 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:36,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:36,132 INFO L93 Difference]: Finished difference Result 62 states and 71 transitions. [2022-11-22 01:14:36,133 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:14:36,133 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-22 01:14:36,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:36,133 INFO L225 Difference]: With dead ends: 62 [2022-11-22 01:14:36,134 INFO L226 Difference]: Without dead ends: 62 [2022-11-22 01:14:36,134 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-11-22 01:14:36,134 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 97 mSDsluCounter, 30 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 47 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:36,135 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 47 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:14:36,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-22 01:14:36,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 38. [2022-11-22 01:14:36,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 24 states have (on average 1.8333333333333333) internal successors, (44), 37 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:36,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 44 transitions. [2022-11-22 01:14:36,138 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 44 transitions. Word has length 6 [2022-11-22 01:14:36,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:36,138 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 44 transitions. [2022-11-22 01:14:36,138 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:36,138 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 44 transitions. [2022-11-22 01:14:36,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 01:14:36,139 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:36,139 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:36,139 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-22 01:14:36,139 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:36,139 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:36,139 INFO L85 PathProgramCache]: Analyzing trace with hash 1444652734, now seen corresponding path program 1 times [2022-11-22 01:14:36,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:36,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [185488557] [2022-11-22 01:14:36,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:36,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:36,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:36,349 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:36,350 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:36,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [185488557] [2022-11-22 01:14:36,350 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [185488557] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:14:36,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1526238366] [2022-11-22 01:14:36,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:36,351 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:14:36,351 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:14:36,352 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:14:36,372 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-22 01:14:36,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:36,435 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 14 conjunts are in the unsatisfiable core [2022-11-22 01:14:36,437 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:14:36,501 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 01:14:36,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 01:14:36,646 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:14:36,647 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-22 01:14:36,647 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1526238366] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:36,647 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-22 01:14:36,647 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [5] total 9 [2022-11-22 01:14:36,647 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [753402461] [2022-11-22 01:14:36,648 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:36,648 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 01:14:36,648 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:36,649 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 01:14:36,649 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-11-22 01:14:36,650 INFO L87 Difference]: Start difference. First operand 38 states and 44 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:36,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:36,751 INFO L93 Difference]: Finished difference Result 36 states and 42 transitions. [2022-11-22 01:14:36,752 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 01:14:36,752 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 01:14:36,752 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:36,752 INFO L225 Difference]: With dead ends: 36 [2022-11-22 01:14:36,752 INFO L226 Difference]: Without dead ends: 36 [2022-11-22 01:14:36,753 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2022-11-22 01:14:36,753 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 67 mSDsluCounter, 17 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 33 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:36,754 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 33 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:14:36,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-22 01:14:36,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 35. [2022-11-22 01:14:36,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 23 states have (on average 1.7826086956521738) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:36,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-11-22 01:14:36,756 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 7 [2022-11-22 01:14:36,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:36,757 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-11-22 01:14:36,757 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:36,757 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-11-22 01:14:36,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 01:14:36,757 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:36,757 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:36,769 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-22 01:14:36,958 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:14:36,958 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:36,958 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:36,959 INFO L85 PathProgramCache]: Analyzing trace with hash 1444655533, now seen corresponding path program 1 times [2022-11-22 01:14:36,959 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:36,959 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [764479569] [2022-11-22 01:14:36,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:36,959 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:36,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:37,382 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:37,382 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:37,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [764479569] [2022-11-22 01:14:37,382 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [764479569] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:14:37,383 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [335060330] [2022-11-22 01:14:37,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:37,383 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:14:37,383 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:14:37,384 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:14:37,392 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-22 01:14:37,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:37,467 INFO L263 TraceCheckSpWp]: Trace formula consists of 73 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-22 01:14:37,469 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:14:37,522 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:37,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-22 01:14:37,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:14:37,730 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:37,730 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:14:37,893 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:14:37,922 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:37,922 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [335060330] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:14:37,922 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1509746438] [2022-11-22 01:14:37,925 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-22 01:14:37,925 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:14:37,925 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:14:37,925 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:14:37,926 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:14:37,971 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:37,975 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:37,977 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:14:38,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:14:38,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:14:38,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:14:38,195 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:14:39,037 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1069#(and (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (or (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~length1~0#1|) (+ |ULTIMATE.start_main_~n~0#1| (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|)))) (not (<= (+ |ULTIMATE.start_main_~n~0#1| 1) (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~length1~0#1|)))) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (not (< (+ |ULTIMATE.start_main_~i~0#1| |ULTIMATE.start_main_~n~0#1| 1) |ULTIMATE.start_main_~length1~0#1|)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (not (< (+ |ULTIMATE.start_main_~i~1#1| 1) |ULTIMATE.start_main_~length2~0#1|)) (<= 0 |#NULL.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:14:39,038 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:14:39,038 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:14:39,038 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-11-22 01:14:39,038 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [939175537] [2022-11-22 01:14:39,038 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:14:39,039 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-22 01:14:39,039 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:39,039 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-22 01:14:39,039 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=133, Invalid=373, Unknown=0, NotChecked=0, Total=506 [2022-11-22 01:14:39,040 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:39,365 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:39,365 INFO L93 Difference]: Finished difference Result 59 states and 68 transitions. [2022-11-22 01:14:39,366 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-22 01:14:39,366 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 01:14:39,366 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:39,367 INFO L225 Difference]: With dead ends: 59 [2022-11-22 01:14:39,367 INFO L226 Difference]: Without dead ends: 59 [2022-11-22 01:14:39,367 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 200 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=188, Invalid=514, Unknown=0, NotChecked=0, Total=702 [2022-11-22 01:14:39,368 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 351 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 351 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:39,368 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [351 Valid, 94 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:14:39,369 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-22 01:14:39,370 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 33. [2022-11-22 01:14:39,370 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:39,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-11-22 01:14:39,371 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 7 [2022-11-22 01:14:39,371 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:39,371 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-11-22 01:14:39,371 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:39,372 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-11-22 01:14:39,372 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 01:14:39,372 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:39,372 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:39,383 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-22 01:14:39,577 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-22 01:14:39,578 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:39,578 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:39,578 INFO L85 PathProgramCache]: Analyzing trace with hash 1541759385, now seen corresponding path program 1 times [2022-11-22 01:14:39,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:39,578 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [175219763] [2022-11-22 01:14:39,579 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:39,579 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:39,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:39,618 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:39,619 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:39,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [175219763] [2022-11-22 01:14:39,619 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [175219763] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:39,619 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:39,619 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:14:39,620 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1707289952] [2022-11-22 01:14:39,620 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:39,620 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 01:14:39,620 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:39,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 01:14:39,621 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:14:39,621 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:39,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:39,664 INFO L93 Difference]: Finished difference Result 29 states and 35 transitions. [2022-11-22 01:14:39,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:14:39,665 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 01:14:39,665 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:39,666 INFO L225 Difference]: With dead ends: 29 [2022-11-22 01:14:39,666 INFO L226 Difference]: Without dead ends: 29 [2022-11-22 01:14:39,666 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:14:39,667 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 45 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:39,667 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 14 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:14:39,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-22 01:14:39,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-22 01:14:39,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 22 states have (on average 1.5909090909090908) internal successors, (35), 28 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:39,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 35 transitions. [2022-11-22 01:14:39,681 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 35 transitions. Word has length 7 [2022-11-22 01:14:39,681 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:39,682 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 35 transitions. [2022-11-22 01:14:39,682 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:39,682 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 35 transitions. [2022-11-22 01:14:39,682 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 01:14:39,683 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:39,683 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:39,683 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-22 01:14:39,683 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:39,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:39,684 INFO L85 PathProgramCache]: Analyzing trace with hash 1541759386, now seen corresponding path program 1 times [2022-11-22 01:14:39,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:39,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [892224207] [2022-11-22 01:14:39,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:39,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:39,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:39,763 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:39,764 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:39,764 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [892224207] [2022-11-22 01:14:39,764 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [892224207] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:39,764 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:39,764 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 01:14:39,765 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1512067906] [2022-11-22 01:14:39,765 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:39,765 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:14:39,765 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:39,766 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:14:39,766 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:14:39,766 INFO L87 Difference]: Start difference. First operand 29 states and 35 transitions. Second operand has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:39,836 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:39,836 INFO L93 Difference]: Finished difference Result 46 states and 55 transitions. [2022-11-22 01:14:39,837 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:14:39,837 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 01:14:39,837 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:39,838 INFO L225 Difference]: With dead ends: 46 [2022-11-22 01:14:39,838 INFO L226 Difference]: Without dead ends: 46 [2022-11-22 01:14:39,838 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-22 01:14:39,839 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 108 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:39,839 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [108 Valid, 26 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:14:39,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-22 01:14:39,841 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 39. [2022-11-22 01:14:39,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 32 states have (on average 1.59375) internal successors, (51), 38 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:39,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 51 transitions. [2022-11-22 01:14:39,842 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 51 transitions. Word has length 7 [2022-11-22 01:14:39,842 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:39,842 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 51 transitions. [2022-11-22 01:14:39,842 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:39,842 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 51 transitions. [2022-11-22 01:14:39,843 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-22 01:14:39,843 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:39,843 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:39,843 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-22 01:14:39,844 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:39,844 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:39,844 INFO L85 PathProgramCache]: Analyzing trace with hash -132946573, now seen corresponding path program 1 times [2022-11-22 01:14:39,844 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:39,845 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [303440417] [2022-11-22 01:14:39,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:39,845 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:39,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:40,261 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:40,262 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:40,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [303440417] [2022-11-22 01:14:40,262 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [303440417] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:14:40,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [410088574] [2022-11-22 01:14:40,262 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:40,263 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:14:40,263 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:14:40,264 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:14:40,286 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-22 01:14:40,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:40,352 INFO L263 TraceCheckSpWp]: Trace formula consists of 111 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-22 01:14:40,354 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:14:40,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:14:40,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:14:40,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:14:40,564 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:14:40,567 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:14:40,567 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-22 01:14:40,586 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:40,586 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-22 01:14:40,586 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [410088574] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:40,586 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-22 01:14:40,587 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [5] total 12 [2022-11-22 01:14:40,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [14273393] [2022-11-22 01:14:40,590 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:40,590 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-22 01:14:40,590 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:40,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-22 01:14:40,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2022-11-22 01:14:40,591 INFO L87 Difference]: Start difference. First operand 39 states and 51 transitions. Second operand has 7 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:40,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:40,887 INFO L93 Difference]: Finished difference Result 93 states and 113 transitions. [2022-11-22 01:14:40,888 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-22 01:14:40,888 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-22 01:14:40,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:40,890 INFO L225 Difference]: With dead ends: 93 [2022-11-22 01:14:40,890 INFO L226 Difference]: Without dead ends: 93 [2022-11-22 01:14:40,890 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=49, Invalid=191, Unknown=0, NotChecked=0, Total=240 [2022-11-22 01:14:40,891 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 142 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:40,891 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 128 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:14:40,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-11-22 01:14:40,894 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 43. [2022-11-22 01:14:40,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 36 states have (on average 1.5277777777777777) internal successors, (55), 42 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:40,895 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 55 transitions. [2022-11-22 01:14:40,895 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 55 transitions. Word has length 9 [2022-11-22 01:14:40,895 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:40,895 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 55 transitions. [2022-11-22 01:14:40,895 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:40,896 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 55 transitions. [2022-11-22 01:14:40,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 01:14:40,896 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:40,896 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:40,907 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-22 01:14:41,102 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-22 01:14:41,103 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:41,103 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:41,103 INFO L85 PathProgramCache]: Analyzing trace with hash -1736430642, now seen corresponding path program 1 times [2022-11-22 01:14:41,103 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:41,103 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1074705082] [2022-11-22 01:14:41,104 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:41,104 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:41,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:41,337 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:41,337 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:41,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1074705082] [2022-11-22 01:14:41,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1074705082] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:14:41,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [495442739] [2022-11-22 01:14:41,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:41,338 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:14:41,338 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:14:41,340 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:14:41,372 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-22 01:14:41,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:41,439 INFO L263 TraceCheckSpWp]: Trace formula consists of 124 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-22 01:14:41,441 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:14:41,524 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:41,525 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:14:41,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-22 01:14:41,649 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:41,650 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [495442739] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:14:41,650 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [756426963] [2022-11-22 01:14:41,652 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:14:41,652 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:14:41,652 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:14:41,652 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:14:41,653 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:14:41,710 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:41,714 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:41,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:14:41,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:14:41,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:14:41,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:14:41,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:14:42,028 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:14:42,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:14:42,182 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:14:44,107 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1588#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:14:44,108 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:14:44,108 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:14:44,108 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 16 [2022-11-22 01:14:44,108 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [565136895] [2022-11-22 01:14:44,108 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:14:44,109 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-22 01:14:44,109 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:44,109 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-22 01:14:44,110 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=558, Unknown=0, NotChecked=0, Total=650 [2022-11-22 01:14:44,110 INFO L87 Difference]: Start difference. First operand 43 states and 55 transitions. Second operand has 17 states, 16 states have (on average 1.5625) internal successors, (25), 17 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:44,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:44,472 INFO L93 Difference]: Finished difference Result 98 states and 118 transitions. [2022-11-22 01:14:44,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-22 01:14:44,472 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.5625) internal successors, (25), 17 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 01:14:44,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:44,473 INFO L225 Difference]: With dead ends: 98 [2022-11-22 01:14:44,473 INFO L226 Difference]: Without dead ends: 98 [2022-11-22 01:14:44,474 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 264 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=153, Invalid=839, Unknown=0, NotChecked=0, Total=992 [2022-11-22 01:14:44,474 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 459 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 294 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 459 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 315 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 294 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:44,475 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [459 Valid, 184 Invalid, 315 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 294 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:14:44,475 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-11-22 01:14:44,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 46. [2022-11-22 01:14:44,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 40 states have (on average 1.525) internal successors, (61), 45 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:44,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 61 transitions. [2022-11-22 01:14:44,477 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 61 transitions. Word has length 11 [2022-11-22 01:14:44,477 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:44,477 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 61 transitions. [2022-11-22 01:14:44,478 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.5625) internal successors, (25), 17 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:44,478 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 61 transitions. [2022-11-22 01:14:44,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 01:14:44,478 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:44,478 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:44,494 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-22 01:14:44,684 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:14:44,685 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:44,685 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:44,685 INFO L85 PathProgramCache]: Analyzing trace with hash 1087317027, now seen corresponding path program 1 times [2022-11-22 01:14:44,685 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:44,686 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1963487671] [2022-11-22 01:14:44,686 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:44,686 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:44,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:44,735 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:44,735 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:44,735 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1963487671] [2022-11-22 01:14:44,736 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1963487671] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:44,736 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:44,736 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:14:44,736 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [766811459] [2022-11-22 01:14:44,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:44,737 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 01:14:44,737 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:44,737 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 01:14:44,737 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:14:44,738 INFO L87 Difference]: Start difference. First operand 46 states and 61 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:44,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:44,780 INFO L93 Difference]: Finished difference Result 47 states and 62 transitions. [2022-11-22 01:14:44,781 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:14:44,781 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 01:14:44,781 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:44,782 INFO L225 Difference]: With dead ends: 47 [2022-11-22 01:14:44,782 INFO L226 Difference]: Without dead ends: 47 [2022-11-22 01:14:44,782 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:14:44,783 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 18 mSDsluCounter, 12 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:44,783 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 30 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:14:44,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2022-11-22 01:14:44,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 45. [2022-11-22 01:14:44,785 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 40 states have (on average 1.45) internal successors, (58), 44 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:44,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 58 transitions. [2022-11-22 01:14:44,785 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 58 transitions. Word has length 11 [2022-11-22 01:14:44,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:44,786 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 58 transitions. [2022-11-22 01:14:44,786 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:44,786 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 58 transitions. [2022-11-22 01:14:44,786 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 01:14:44,787 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:44,787 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:44,787 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-22 01:14:44,787 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:44,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:44,788 INFO L85 PathProgramCache]: Analyzing trace with hash 1087317028, now seen corresponding path program 1 times [2022-11-22 01:14:44,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:44,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1826662237] [2022-11-22 01:14:44,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:44,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:44,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:44,915 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:44,916 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:44,916 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1826662237] [2022-11-22 01:14:44,916 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1826662237] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:44,916 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:44,916 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 01:14:44,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1361888455] [2022-11-22 01:14:44,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:44,917 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:14:44,917 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:44,918 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:14:44,918 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:14:44,918 INFO L87 Difference]: Start difference. First operand 45 states and 58 transitions. Second operand has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:45,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:45,007 INFO L93 Difference]: Finished difference Result 66 states and 84 transitions. [2022-11-22 01:14:45,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:14:45,007 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 01:14:45,007 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:45,008 INFO L225 Difference]: With dead ends: 66 [2022-11-22 01:14:45,008 INFO L226 Difference]: Without dead ends: 66 [2022-11-22 01:14:45,008 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-22 01:14:45,009 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 57 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:45,009 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 29 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:14:45,009 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2022-11-22 01:14:45,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 54. [2022-11-22 01:14:45,010 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 49 states have (on average 1.4489795918367347) internal successors, (71), 53 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:45,011 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 71 transitions. [2022-11-22 01:14:45,011 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 71 transitions. Word has length 11 [2022-11-22 01:14:45,011 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:45,011 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 71 transitions. [2022-11-22 01:14:45,011 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:45,011 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 71 transitions. [2022-11-22 01:14:45,012 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-22 01:14:45,012 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:45,012 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:45,012 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-11-22 01:14:45,012 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:45,013 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:45,013 INFO L85 PathProgramCache]: Analyzing trace with hash 2032431783, now seen corresponding path program 2 times [2022-11-22 01:14:45,013 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:45,013 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1958619132] [2022-11-22 01:14:45,013 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:45,013 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:45,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:45,558 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:45,558 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:45,558 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1958619132] [2022-11-22 01:14:45,558 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1958619132] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:14:45,558 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2129569014] [2022-11-22 01:14:45,559 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:14:45,559 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:14:45,559 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:14:45,560 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:14:45,578 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-22 01:14:45,656 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 01:14:45,657 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:14:45,658 INFO L263 TraceCheckSpWp]: Trace formula consists of 135 conjuncts, 46 conjunts are in the unsatisfiable core [2022-11-22 01:14:45,661 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:14:45,836 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:14:45,913 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:45,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 26 [2022-11-22 01:14:46,211 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:46,213 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:46,213 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:14:46,214 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:14:46,223 INFO L321 Elim1Store]: treesize reduction 4, result has 66.7 percent of original size [2022-11-22 01:14:46,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 38 treesize of output 21 [2022-11-22 01:14:46,254 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 2 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:46,254 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:14:46,443 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:14:46,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 93 treesize of output 83 [2022-11-22 01:14:46,717 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:46,717 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2129569014] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:14:46,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1638098546] [2022-11-22 01:14:46,719 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:14:46,719 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:14:46,720 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:14:46,720 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:14:46,720 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:14:46,761 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:46,764 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:14:46,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:14:46,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:14:46,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:14:46,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:14:47,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:14:47,055 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:14:47,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:14:47,203 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:14:49,383 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2081#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:14:49,384 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:14:49,384 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:14:49,384 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 12, 12] total 29 [2022-11-22 01:14:49,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1561762614] [2022-11-22 01:14:49,385 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:14:49,385 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-22 01:14:49,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:49,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-22 01:14:49,386 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=124, Invalid=1282, Unknown=0, NotChecked=0, Total=1406 [2022-11-22 01:14:49,386 INFO L87 Difference]: Start difference. First operand 54 states and 71 transitions. Second operand has 29 states, 29 states have (on average 1.2413793103448276) internal successors, (36), 29 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:58,147 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:58,148 INFO L93 Difference]: Finished difference Result 435 states and 504 transitions. [2022-11-22 01:14:58,148 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-11-22 01:14:58,148 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 1.2413793103448276) internal successors, (36), 29 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-22 01:14:58,148 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:58,150 INFO L225 Difference]: With dead ends: 435 [2022-11-22 01:14:58,150 INFO L226 Difference]: Without dead ends: 435 [2022-11-22 01:14:58,153 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 89 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1928 ImplicationChecksByTransitivity, 10.1s TimeCoverageRelationStatistics Valid=1264, Invalid=6926, Unknown=0, NotChecked=0, Total=8190 [2022-11-22 01:14:58,154 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 1781 mSDsluCounter, 756 mSDsCounter, 0 mSdLazyCounter, 1245 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1781 SdHoareTripleChecker+Valid, 789 SdHoareTripleChecker+Invalid, 1307 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 1245 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:58,154 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1781 Valid, 789 Invalid, 1307 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 1245 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-11-22 01:14:58,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 435 states. [2022-11-22 01:14:58,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 435 to 75. [2022-11-22 01:14:58,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 74 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:58,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 101 transitions. [2022-11-22 01:14:58,159 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 101 transitions. Word has length 13 [2022-11-22 01:14:58,159 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:58,160 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 101 transitions. [2022-11-22 01:14:58,160 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 1.2413793103448276) internal successors, (36), 29 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:58,160 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 101 transitions. [2022-11-22 01:14:58,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-22 01:14:58,161 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:58,161 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:58,171 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-22 01:14:58,371 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-11-22 01:14:58,371 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:58,372 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:58,372 INFO L85 PathProgramCache]: Analyzing trace with hash 1320410540, now seen corresponding path program 1 times [2022-11-22 01:14:58,372 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:58,372 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [551255048] [2022-11-22 01:14:58,372 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:58,372 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:58,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:58,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:58,446 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:58,446 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [551255048] [2022-11-22 01:14:58,446 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [551255048] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:58,446 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:58,447 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 01:14:58,448 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1076295251] [2022-11-22 01:14:58,448 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:58,448 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:14:58,448 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:58,449 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:14:58,449 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:14:58,449 INFO L87 Difference]: Start difference. First operand 75 states and 101 transitions. Second operand has 5 states, 5 states have (on average 3.0) internal successors, (15), 4 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:58,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:58,502 INFO L93 Difference]: Finished difference Result 78 states and 98 transitions. [2022-11-22 01:14:58,502 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 01:14:58,502 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 3.0) internal successors, (15), 4 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-22 01:14:58,502 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:58,503 INFO L225 Difference]: With dead ends: 78 [2022-11-22 01:14:58,503 INFO L226 Difference]: Without dead ends: 78 [2022-11-22 01:14:58,503 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-22 01:14:58,504 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 55 mSDsluCounter, 24 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 40 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:58,504 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 40 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:14:58,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-22 01:14:58,507 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 68. [2022-11-22 01:14:58,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 63 states have (on average 1.3650793650793651) internal successors, (86), 67 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:58,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 86 transitions. [2022-11-22 01:14:58,509 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 86 transitions. Word has length 15 [2022-11-22 01:14:58,510 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:58,510 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 86 transitions. [2022-11-22 01:14:58,511 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 3.0) internal successors, (15), 4 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:58,511 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 86 transitions. [2022-11-22 01:14:58,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-22 01:14:58,513 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:58,513 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:58,514 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-11-22 01:14:58,514 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:58,514 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:58,514 INFO L85 PathProgramCache]: Analyzing trace with hash -1735464012, now seen corresponding path program 1 times [2022-11-22 01:14:58,515 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:58,515 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1727431312] [2022-11-22 01:14:58,515 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:58,516 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:58,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:58,771 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:58,771 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:58,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1727431312] [2022-11-22 01:14:58,771 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1727431312] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:14:58,772 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:14:58,772 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-22 01:14:58,772 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [453221749] [2022-11-22 01:14:58,772 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:14:58,772 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-22 01:14:58,773 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:14:58,773 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-22 01:14:58,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-22 01:14:58,773 INFO L87 Difference]: Start difference. First operand 68 states and 86 transitions. Second operand has 8 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:59,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:14:59,051 INFO L93 Difference]: Finished difference Result 81 states and 98 transitions. [2022-11-22 01:14:59,051 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-22 01:14:59,051 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-22 01:14:59,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:14:59,052 INFO L225 Difference]: With dead ends: 81 [2022-11-22 01:14:59,052 INFO L226 Difference]: Without dead ends: 81 [2022-11-22 01:14:59,052 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2022-11-22 01:14:59,053 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 34 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 102 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:14:59,053 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 110 Invalid, 102 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:14:59,053 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-11-22 01:14:59,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 73. [2022-11-22 01:14:59,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 72 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:59,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 90 transitions. [2022-11-22 01:14:59,055 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 90 transitions. Word has length 16 [2022-11-22 01:14:59,055 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:14:59,055 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 90 transitions. [2022-11-22 01:14:59,055 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:14:59,056 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 90 transitions. [2022-11-22 01:14:59,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-22 01:14:59,056 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:14:59,056 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:14:59,056 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-11-22 01:14:59,056 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:14:59,057 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:14:59,057 INFO L85 PathProgramCache]: Analyzing trace with hash 1089060187, now seen corresponding path program 3 times [2022-11-22 01:14:59,057 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:14:59,057 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1192807194] [2022-11-22 01:14:59,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:14:59,057 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:14:59,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:14:59,560 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:14:59,560 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:14:59,560 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1192807194] [2022-11-22 01:14:59,561 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1192807194] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:14:59,561 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1538218324] [2022-11-22 01:14:59,561 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:14:59,561 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:14:59,561 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:14:59,562 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:14:59,566 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-22 01:14:59,663 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:14:59,663 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:14:59,665 INFO L263 TraceCheckSpWp]: Trace formula consists of 159 conjuncts, 45 conjunts are in the unsatisfiable core [2022-11-22 01:14:59,667 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:14:59,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:14:59,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:14:59,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:15:00,125 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-22 01:15:00,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-22 01:15:00,155 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:00,155 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:15:00,343 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:00,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-22 01:15:00,351 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:00,351 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-22 01:15:00,530 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:00,530 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1538218324] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:15:00,530 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [648717200] [2022-11-22 01:15:00,532 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:15:00,533 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:15:00,533 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:15:00,533 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:15:00,533 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:15:00,576 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:00,579 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:00,580 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:15:00,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:15:00,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:00,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:00,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:15:00,839 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:15:00,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:15:00,981 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:15:03,096 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3158#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:15:03,096 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:15:03,096 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:15:03,096 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 12, 12] total 27 [2022-11-22 01:15:03,097 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1622499302] [2022-11-22 01:15:03,097 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:15:03,097 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-22 01:15:03,097 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:15:03,098 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-22 01:15:03,098 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=105, Invalid=1149, Unknown=6, NotChecked=0, Total=1260 [2022-11-22 01:15:03,098 INFO L87 Difference]: Start difference. First operand 73 states and 90 transitions. Second operand has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:07,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:15:07,625 INFO L93 Difference]: Finished difference Result 296 states and 325 transitions. [2022-11-22 01:15:07,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-11-22 01:15:07,626 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-22 01:15:07,626 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:15:07,627 INFO L225 Difference]: With dead ends: 296 [2022-11-22 01:15:07,627 INFO L226 Difference]: Without dead ends: 296 [2022-11-22 01:15:07,629 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 22 SyntacticMatches, 2 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 963 ImplicationChecksByTransitivity, 6.0s TimeCoverageRelationStatistics Valid=583, Invalid=4103, Unknown=6, NotChecked=0, Total=4692 [2022-11-22 01:15:07,629 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 1214 mSDsluCounter, 993 mSDsCounter, 0 mSdLazyCounter, 1549 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1214 SdHoareTripleChecker+Valid, 1058 SdHoareTripleChecker+Invalid, 1588 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 1549 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:15:07,629 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1214 Valid, 1058 Invalid, 1588 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 1549 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-22 01:15:07,630 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2022-11-22 01:15:07,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 91. [2022-11-22 01:15:07,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 86 states have (on average 1.3372093023255813) internal successors, (115), 90 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:07,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 115 transitions. [2022-11-22 01:15:07,634 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 115 transitions. Word has length 17 [2022-11-22 01:15:07,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:15:07,634 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 115 transitions. [2022-11-22 01:15:07,634 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:07,634 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 115 transitions. [2022-11-22 01:15:07,635 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-22 01:15:07,635 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:15:07,635 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:15:07,645 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-11-22 01:15:07,841 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:15:07,842 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:15:07,842 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:15:07,842 INFO L85 PathProgramCache]: Analyzing trace with hash 2034027914, now seen corresponding path program 1 times [2022-11-22 01:15:07,842 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:15:07,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1478720722] [2022-11-22 01:15:07,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:15:07,843 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:15:07,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:15:08,002 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:08,003 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:15:08,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1478720722] [2022-11-22 01:15:08,003 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1478720722] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:15:08,003 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:15:08,003 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:15:08,003 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1349801580] [2022-11-22 01:15:08,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:15:08,004 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:15:08,004 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:15:08,005 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:15:08,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:15:08,005 INFO L87 Difference]: Start difference. First operand 91 states and 115 transitions. Second operand has 5 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:08,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:15:08,034 INFO L93 Difference]: Finished difference Result 90 states and 114 transitions. [2022-11-22 01:15:08,034 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:15:08,034 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-22 01:15:08,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:15:08,036 INFO L225 Difference]: With dead ends: 90 [2022-11-22 01:15:08,036 INFO L226 Difference]: Without dead ends: 75 [2022-11-22 01:15:08,036 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:15:08,037 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 26 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:15:08,037 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 30 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:15:08,038 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-22 01:15:08,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-11-22 01:15:08,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 71 states have (on average 1.267605633802817) internal successors, (90), 74 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:08,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 90 transitions. [2022-11-22 01:15:08,040 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 90 transitions. Word has length 17 [2022-11-22 01:15:08,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:15:08,040 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 90 transitions. [2022-11-22 01:15:08,040 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:08,041 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 90 transitions. [2022-11-22 01:15:08,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-22 01:15:08,044 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:15:08,044 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:15:08,044 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-11-22 01:15:08,044 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:15:08,045 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:15:08,045 INFO L85 PathProgramCache]: Analyzing trace with hash -60663559, now seen corresponding path program 1 times [2022-11-22 01:15:08,045 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:15:08,045 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1966185877] [2022-11-22 01:15:08,045 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:15:08,045 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:15:08,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:15:08,303 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:15:08,303 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:15:08,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1966185877] [2022-11-22 01:15:08,303 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1966185877] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:15:08,303 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:15:08,304 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-22 01:15:08,304 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [924931542] [2022-11-22 01:15:08,304 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:15:08,304 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-22 01:15:08,304 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:15:08,305 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-22 01:15:08,305 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2022-11-22 01:15:08,305 INFO L87 Difference]: Start difference. First operand 75 states and 90 transitions. Second operand has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:08,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:15:08,566 INFO L93 Difference]: Finished difference Result 123 states and 143 transitions. [2022-11-22 01:15:08,566 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-22 01:15:08,566 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-22 01:15:08,566 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:15:08,567 INFO L225 Difference]: With dead ends: 123 [2022-11-22 01:15:08,567 INFO L226 Difference]: Without dead ends: 93 [2022-11-22 01:15:08,567 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=149, Unknown=0, NotChecked=0, Total=210 [2022-11-22 01:15:08,568 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 49 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 80 SdHoareTripleChecker+Invalid, 88 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:15:08,568 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 80 Invalid, 88 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:15:08,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-11-22 01:15:08,570 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 89. [2022-11-22 01:15:08,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 85 states have (on average 1.2470588235294118) internal successors, (106), 88 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:08,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 106 transitions. [2022-11-22 01:15:08,570 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 106 transitions. Word has length 18 [2022-11-22 01:15:08,571 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:15:08,571 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 106 transitions. [2022-11-22 01:15:08,571 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:08,571 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 106 transitions. [2022-11-22 01:15:08,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-22 01:15:08,571 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:15:08,571 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:15:08,571 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-11-22 01:15:08,572 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:15:08,572 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:15:08,572 INFO L85 PathProgramCache]: Analyzing trace with hash -290483447, now seen corresponding path program 1 times [2022-11-22 01:15:08,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:15:08,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1283553918] [2022-11-22 01:15:08,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:15:08,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:15:08,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:15:08,818 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:15:08,819 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:15:08,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1283553918] [2022-11-22 01:15:08,819 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1283553918] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:15:08,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [156621937] [2022-11-22 01:15:08,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:15:08,820 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:15:08,820 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:15:08,821 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:15:08,824 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-22 01:15:08,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:15:08,937 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-22 01:15:08,938 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:15:09,027 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:15:09,027 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:15:09,151 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 01:15:09,194 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:15:09,194 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [156621937] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:15:09,195 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1713613966] [2022-11-22 01:15:09,196 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:15:09,196 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:15:09,197 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:15:09,197 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:15:09,197 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:15:09,251 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:09,254 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:09,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:15:09,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:09,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:09,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:09,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:15:09,503 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:09,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:09,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:15:09,630 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:15:09,630 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:15:09,842 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:15:09,846 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:15:09,903 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-22 01:15:09,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-22 01:15:10,081 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:15:10,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:15:10,184 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:15:10,184 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:15:10,237 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:15:12,748 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4155#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:15:12,748 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:15:12,748 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:15:12,748 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 7, 7] total 17 [2022-11-22 01:15:12,748 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1642613823] [2022-11-22 01:15:12,749 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:15:12,749 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-22 01:15:12,749 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:15:12,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-22 01:15:12,750 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=149, Invalid=843, Unknown=0, NotChecked=0, Total=992 [2022-11-22 01:15:12,750 INFO L87 Difference]: Start difference. First operand 89 states and 106 transitions. Second operand has 18 states, 17 states have (on average 2.6470588235294117) internal successors, (45), 18 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:13,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:15:13,029 INFO L93 Difference]: Finished difference Result 117 states and 132 transitions. [2022-11-22 01:15:13,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-22 01:15:13,029 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 17 states have (on average 2.6470588235294117) internal successors, (45), 18 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-22 01:15:13,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:15:13,030 INFO L225 Difference]: With dead ends: 117 [2022-11-22 01:15:13,030 INFO L226 Difference]: Without dead ends: 117 [2022-11-22 01:15:13,031 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 35 SyntacticMatches, 2 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 376 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=218, Invalid=1264, Unknown=0, NotChecked=0, Total=1482 [2022-11-22 01:15:13,032 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 162 mSDsluCounter, 78 mSDsCounter, 0 mSdLazyCounter, 208 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:15:13,032 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [162 Valid, 95 Invalid, 218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 208 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:15:13,033 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-11-22 01:15:13,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 104. [2022-11-22 01:15:13,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 100 states have (on average 1.21) internal successors, (121), 103 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:13,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 121 transitions. [2022-11-22 01:15:13,035 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 121 transitions. Word has length 20 [2022-11-22 01:15:13,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:15:13,035 INFO L495 AbstractCegarLoop]: Abstraction has 104 states and 121 transitions. [2022-11-22 01:15:13,036 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 17 states have (on average 2.6470588235294117) internal successors, (45), 18 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:13,036 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 121 transitions. [2022-11-22 01:15:13,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-22 01:15:13,036 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:15:13,036 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:15:13,047 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2022-11-22 01:15:13,241 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:15:13,242 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:15:13,242 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:15:13,242 INFO L85 PathProgramCache]: Analyzing trace with hash -2039962225, now seen corresponding path program 4 times [2022-11-22 01:15:13,242 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:15:13,242 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [224107993] [2022-11-22 01:15:13,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:15:13,243 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:15:13,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:15:13,903 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 1 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:13,903 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:15:13,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [224107993] [2022-11-22 01:15:13,904 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [224107993] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:15:13,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2023091625] [2022-11-22 01:15:13,904 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:15:13,904 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:15:13,904 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:15:13,905 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:15:13,922 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-22 01:15:14,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:15:14,013 INFO L263 TraceCheckSpWp]: Trace formula consists of 183 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-22 01:15:14,015 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:15:14,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:15:14,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:15:14,269 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:15:14,549 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-22 01:15:14,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-22 01:15:14,581 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:14,581 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:15:14,810 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:14,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-22 01:15:14,820 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:14,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-22 01:15:15,017 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:15,017 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2023091625] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:15:15,017 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1763734904] [2022-11-22 01:15:15,019 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:15:15,019 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:15:15,020 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:15:15,020 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:15:15,020 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:15:15,071 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:15,074 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:15,076 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:15:15,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:15:15,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:15,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:15,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:15:15,311 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:15:15,312 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:15:15,469 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:15:17,489 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4556#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:15:17,489 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:15:17,489 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:15:17,490 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 14, 14] total 32 [2022-11-22 01:15:17,490 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1401545266] [2022-11-22 01:15:17,490 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:15:17,490 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-22 01:15:17,490 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:15:17,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-22 01:15:17,491 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=1515, Unknown=6, NotChecked=0, Total=1640 [2022-11-22 01:15:17,491 INFO L87 Difference]: Start difference. First operand 104 states and 121 transitions. Second operand has 32 states, 32 states have (on average 1.6875) internal successors, (54), 32 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:21,446 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:15:21,446 INFO L93 Difference]: Finished difference Result 305 states and 333 transitions. [2022-11-22 01:15:21,446 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-22 01:15:21,446 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.6875) internal successors, (54), 32 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-11-22 01:15:21,447 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:15:21,447 INFO L225 Difference]: With dead ends: 305 [2022-11-22 01:15:21,447 INFO L226 Difference]: Without dead ends: 291 [2022-11-22 01:15:21,449 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 31 SyntacticMatches, 2 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 4 DeprecatedPredicates, 879 ImplicationChecksByTransitivity, 5.8s TimeCoverageRelationStatistics Valid=499, Invalid=4051, Unknown=6, NotChecked=0, Total=4556 [2022-11-22 01:15:21,449 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 1065 mSDsluCounter, 532 mSDsCounter, 0 mSdLazyCounter, 1301 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1065 SdHoareTripleChecker+Valid, 567 SdHoareTripleChecker+Invalid, 1335 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 1301 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:15:21,450 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1065 Valid, 567 Invalid, 1335 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 1301 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-22 01:15:21,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2022-11-22 01:15:21,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 130. [2022-11-22 01:15:21,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130 states, 126 states have (on average 1.2063492063492063) internal successors, (152), 129 states have internal predecessors, (152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:21,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130 states to 130 states and 152 transitions. [2022-11-22 01:15:21,454 INFO L78 Accepts]: Start accepts. Automaton has 130 states and 152 transitions. Word has length 21 [2022-11-22 01:15:21,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:15:21,454 INFO L495 AbstractCegarLoop]: Abstraction has 130 states and 152 transitions. [2022-11-22 01:15:21,455 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.6875) internal successors, (54), 32 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:21,455 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 152 transitions. [2022-11-22 01:15:21,455 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-22 01:15:21,455 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:15:21,456 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:15:21,467 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-22 01:15:21,661 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-11-22 01:15:21,662 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:15:21,662 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:15:21,662 INFO L85 PathProgramCache]: Analyzing trace with hash -1485927613, now seen corresponding path program 5 times [2022-11-22 01:15:21,663 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:15:21,663 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [906752705] [2022-11-22 01:15:21,663 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:15:21,663 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:15:21,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:15:22,549 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 4 proven. 37 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:22,549 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:15:22,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [906752705] [2022-11-22 01:15:22,549 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [906752705] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:15:22,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2041171390] [2022-11-22 01:15:22,550 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:15:22,550 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:15:22,550 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:15:22,551 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:15:22,569 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-22 01:15:22,709 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-22 01:15:22,709 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:15:22,711 INFO L263 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 55 conjunts are in the unsatisfiable core [2022-11-22 01:15:22,714 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:15:22,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:15:22,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:15:23,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:15:23,444 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-22 01:15:23,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-22 01:15:23,478 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:23,478 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:15:23,799 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:23,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-22 01:15:23,806 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:23,807 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-22 01:15:24,028 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:24,028 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2041171390] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:15:24,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [526693949] [2022-11-22 01:15:24,030 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:15:24,030 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:15:24,031 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:15:24,031 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:15:24,031 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:15:24,080 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:24,083 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:24,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:15:24,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:24,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:24,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:24,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:15:24,345 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:15:24,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:15:24,469 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:15:26,684 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5235#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:15:26,684 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:15:26,684 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:15:26,684 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 16, 16] total 37 [2022-11-22 01:15:26,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [675549041] [2022-11-22 01:15:26,685 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:15:26,685 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-11-22 01:15:26,685 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:15:26,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-11-22 01:15:26,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=133, Invalid=1928, Unknown=9, NotChecked=0, Total=2070 [2022-11-22 01:15:26,686 INFO L87 Difference]: Start difference. First operand 130 states and 152 transitions. Second operand has 37 states, 37 states have (on average 1.7297297297297298) internal successors, (64), 37 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:31,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:15:31,899 INFO L93 Difference]: Finished difference Result 414 states and 452 transitions. [2022-11-22 01:15:31,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-11-22 01:15:31,900 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 1.7297297297297298) internal successors, (64), 37 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-22 01:15:31,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:15:31,902 INFO L225 Difference]: With dead ends: 414 [2022-11-22 01:15:31,902 INFO L226 Difference]: Without dead ends: 398 [2022-11-22 01:15:31,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 40 SyntacticMatches, 2 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 5 DeprecatedPredicates, 1191 ImplicationChecksByTransitivity, 7.0s TimeCoverageRelationStatistics Valid=607, Invalid=5390, Unknown=9, NotChecked=0, Total=6006 [2022-11-22 01:15:31,904 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 1189 mSDsluCounter, 971 mSDsCounter, 0 mSdLazyCounter, 2213 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1189 SdHoareTripleChecker+Valid, 1017 SdHoareTripleChecker+Invalid, 2251 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 2213 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-22 01:15:31,904 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1189 Valid, 1017 Invalid, 2251 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 2213 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-11-22 01:15:31,905 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 398 states. [2022-11-22 01:15:31,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 398 to 156. [2022-11-22 01:15:31,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 152 states have (on average 1.2039473684210527) internal successors, (183), 155 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:31,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 183 transitions. [2022-11-22 01:15:31,910 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 183 transitions. Word has length 25 [2022-11-22 01:15:31,910 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:15:31,910 INFO L495 AbstractCegarLoop]: Abstraction has 156 states and 183 transitions. [2022-11-22 01:15:31,911 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 1.7297297297297298) internal successors, (64), 37 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:31,911 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 183 transitions. [2022-11-22 01:15:31,911 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-22 01:15:31,911 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:15:31,912 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:15:31,918 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-22 01:15:32,117 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-11-22 01:15:32,118 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:15:32,118 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:15:32,118 INFO L85 PathProgramCache]: Analyzing trace with hash -762772497, now seen corresponding path program 2 times [2022-11-22 01:15:32,118 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:15:32,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1702568626] [2022-11-22 01:15:32,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:15:32,118 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:15:32,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:15:32,694 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:32,695 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:15:32,695 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1702568626] [2022-11-22 01:15:32,695 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1702568626] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:15:32,695 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1490054293] [2022-11-22 01:15:32,695 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:15:32,695 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:15:32,695 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:15:32,699 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:15:32,722 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-22 01:15:32,830 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 01:15:32,831 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:15:32,833 INFO L263 TraceCheckSpWp]: Trace formula consists of 208 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-22 01:15:32,840 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:15:32,849 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:15:32,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:33,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:15:33,211 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 01:15:33,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 01:15:33,219 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 6 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:33,220 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:15:33,328 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_411 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_411) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 1)) 0)) is different from false [2022-11-22 01:15:33,345 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:33,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:15:33,355 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:33,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:15:33,556 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-11-22 01:15:33,556 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1490054293] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:15:33,556 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1983806724] [2022-11-22 01:15:33,558 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:15:33,559 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:15:33,559 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:15:33,559 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:15:33,559 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:15:33,600 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:33,603 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:33,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:15:33,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:15:33,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:33,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:33,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:15:33,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:33,861 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:33,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:15:33,967 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:15:33,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:15:34,129 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:15:34,133 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:15:34,195 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-22 01:15:34,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-22 01:15:34,352 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:15:34,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:15:34,447 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:15:34,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:15:34,505 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:15:37,211 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6050#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:15:37,211 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:15:37,211 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:15:37,212 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 28 [2022-11-22 01:15:37,212 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1528723518] [2022-11-22 01:15:37,212 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:15:37,212 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-22 01:15:37,212 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:15:37,213 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-22 01:15:37,213 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=1465, Unknown=9, NotChecked=78, Total=1722 [2022-11-22 01:15:37,214 INFO L87 Difference]: Start difference. First operand 156 states and 183 transitions. Second operand has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:37,981 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:15:37,981 INFO L93 Difference]: Finished difference Result 180 states and 206 transitions. [2022-11-22 01:15:37,982 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-22 01:15:37,982 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-22 01:15:37,982 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:15:37,983 INFO L225 Difference]: With dead ends: 180 [2022-11-22 01:15:37,983 INFO L226 Difference]: Without dead ends: 151 [2022-11-22 01:15:37,984 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 45 SyntacticMatches, 2 SemanticMatches, 52 ConstructedPredicates, 1 IntricatePredicates, 2 DeprecatedPredicates, 706 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=327, Invalid=2423, Unknown=10, NotChecked=102, Total=2862 [2022-11-22 01:15:37,984 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 120 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 258 mSolverCounterSat, 20 mSolverCounterUnsat, 10 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 330 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 258 IncrementalHoareTripleChecker+Invalid, 10 IncrementalHoareTripleChecker+Unknown, 42 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:15:37,984 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 120 Invalid, 330 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 258 Invalid, 10 Unknown, 42 Unchecked, 0.3s Time] [2022-11-22 01:15:37,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-11-22 01:15:37,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 151. [2022-11-22 01:15:37,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 147 states have (on average 1.1972789115646258) internal successors, (176), 150 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:37,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 176 transitions. [2022-11-22 01:15:37,988 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 176 transitions. Word has length 25 [2022-11-22 01:15:37,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:15:37,989 INFO L495 AbstractCegarLoop]: Abstraction has 151 states and 176 transitions. [2022-11-22 01:15:37,989 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:37,989 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 176 transitions. [2022-11-22 01:15:37,989 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-22 01:15:37,990 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:15:37,990 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:15:37,995 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-22 01:15:38,195 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-11-22 01:15:38,195 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:15:38,195 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:15:38,195 INFO L85 PathProgramCache]: Analyzing trace with hash 688632906, now seen corresponding path program 3 times [2022-11-22 01:15:38,196 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:15:38,196 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1656803969] [2022-11-22 01:15:38,196 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:15:38,196 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:15:38,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:15:38,755 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:15:38,755 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:15:38,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1656803969] [2022-11-22 01:15:38,755 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1656803969] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:15:38,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1821973635] [2022-11-22 01:15:38,755 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:15:38,756 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:15:38,756 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:15:38,771 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:15:38,794 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-22 01:15:38,900 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:15:38,901 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:15:38,903 INFO L263 TraceCheckSpWp]: Trace formula consists of 221 conjuncts, 58 conjunts are in the unsatisfiable core [2022-11-22 01:15:38,905 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:15:39,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:15:39,347 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-22 01:15:39,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 48 treesize of output 56 [2022-11-22 01:15:39,380 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:15:39,382 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:39,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 20 [2022-11-22 01:15:39,591 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:39,592 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:15:39,594 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:39,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-11-22 01:15:39,600 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:15:39,600 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:15:40,065 INFO L321 Elim1Store]: treesize reduction 16, result has 66.7 percent of original size [2022-11-22 01:15:40,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 71 treesize of output 87 [2022-11-22 01:15:40,080 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:40,080 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 51 [2022-11-22 01:15:40,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:15:40,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2022-11-22 01:15:40,144 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:40,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 45 treesize of output 55 [2022-11-22 01:15:40,423 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 11 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:15:40,423 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1821973635] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:15:40,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1188897141] [2022-11-22 01:15:40,425 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:15:40,425 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:15:40,425 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:15:40,425 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:15:40,425 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:15:40,475 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:40,478 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:40,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:15:40,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:40,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:40,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:40,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:40,714 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:40,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:40,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:15:40,847 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:15:40,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:15:40,979 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:15:40,982 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:15:41,036 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-22 01:15:41,036 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-22 01:15:41,206 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:15:41,206 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:15:41,301 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:15:41,301 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:15:41,350 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:15:44,457 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6615#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:15:44,458 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:15:44,458 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:15:44,458 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 17, 17] total 40 [2022-11-22 01:15:44,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [207752444] [2022-11-22 01:15:44,458 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:15:44,459 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-11-22 01:15:44,459 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:15:44,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-11-22 01:15:44,461 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=261, Invalid=2590, Unknown=11, NotChecked=0, Total=2862 [2022-11-22 01:15:44,461 INFO L87 Difference]: Start difference. First operand 151 states and 176 transitions. Second operand has 40 states, 40 states have (on average 1.575) internal successors, (63), 40 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:46,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:15:46,423 INFO L93 Difference]: Finished difference Result 281 states and 316 transitions. [2022-11-22 01:15:46,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-22 01:15:46,423 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 1.575) internal successors, (63), 40 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-22 01:15:46,424 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:15:46,424 INFO L225 Difference]: With dead ends: 281 [2022-11-22 01:15:46,425 INFO L226 Difference]: Without dead ends: 193 [2022-11-22 01:15:46,426 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 117 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1476 ImplicationChecksByTransitivity, 5.6s TimeCoverageRelationStatistics Valid=781, Invalid=5214, Unknown=11, NotChecked=0, Total=6006 [2022-11-22 01:15:46,427 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 263 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 653 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 263 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 683 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 653 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 01:15:46,427 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [263 Valid, 268 Invalid, 683 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 653 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-22 01:15:46,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2022-11-22 01:15:46,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 183. [2022-11-22 01:15:46,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 183 states, 179 states have (on average 1.1843575418994414) internal successors, (212), 182 states have internal predecessors, (212), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:46,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 183 states to 183 states and 212 transitions. [2022-11-22 01:15:46,431 INFO L78 Accepts]: Start accepts. Automaton has 183 states and 212 transitions. Word has length 27 [2022-11-22 01:15:46,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:15:46,432 INFO L495 AbstractCegarLoop]: Abstraction has 183 states and 212 transitions. [2022-11-22 01:15:46,432 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 40 states have (on average 1.575) internal successors, (63), 40 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:15:46,432 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 212 transitions. [2022-11-22 01:15:46,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-22 01:15:46,433 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:15:46,433 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:15:46,440 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-22 01:15:46,639 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-22 01:15:46,640 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:15:46,640 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:15:46,640 INFO L85 PathProgramCache]: Analyzing trace with hash 1183895159, now seen corresponding path program 6 times [2022-11-22 01:15:46,640 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:15:46,640 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [815408776] [2022-11-22 01:15:46,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:15:46,641 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:15:46,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:15:47,471 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 9 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:47,471 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:15:47,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [815408776] [2022-11-22 01:15:47,472 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [815408776] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:15:47,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [998073460] [2022-11-22 01:15:47,472 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:15:47,472 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:15:47,472 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:15:47,473 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:15:47,475 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-22 01:15:47,618 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:15:47,618 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:15:47,621 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-22 01:15:47,623 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:15:47,975 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:15:48,055 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:48,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:15:48,566 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:15:48,568 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:15:48,568 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-22 01:15:48,611 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 6 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:48,611 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:15:49,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 79 treesize of output 73 [2022-11-22 01:15:49,773 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 6 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:15:49,774 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [998073460] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:15:49,774 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [178429150] [2022-11-22 01:15:49,777 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:15:49,777 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:15:49,777 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:15:49,777 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:15:49,777 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:15:49,828 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:49,831 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:15:49,833 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:15:49,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:15:49,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:49,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:15:50,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:15:50,082 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:15:50,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:15:50,168 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:15:52,176 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7359#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:15:52,177 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:15:52,177 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:15:52,177 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 19, 19] total 50 [2022-11-22 01:15:52,177 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [391948210] [2022-11-22 01:15:52,177 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:15:52,179 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-22 01:15:52,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:15:52,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-22 01:15:52,181 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=3254, Unknown=0, NotChecked=0, Total=3422 [2022-11-22 01:15:52,181 INFO L87 Difference]: Start difference. First operand 183 states and 212 transitions. Second operand has 50 states, 50 states have (on average 1.68) internal successors, (84), 50 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:01,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:16:01,809 INFO L93 Difference]: Finished difference Result 592 states and 648 transitions. [2022-11-22 01:16:01,810 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-11-22 01:16:01,810 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 50 states have (on average 1.68) internal successors, (84), 50 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-22 01:16:01,810 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:16:01,812 INFO L225 Difference]: With dead ends: 592 [2022-11-22 01:16:01,812 INFO L226 Difference]: Without dead ends: 540 [2022-11-22 01:16:01,814 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 43 SyntacticMatches, 0 SemanticMatches, 107 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2044 ImplicationChecksByTransitivity, 10.9s TimeCoverageRelationStatistics Valid=1118, Invalid=10654, Unknown=0, NotChecked=0, Total=11772 [2022-11-22 01:16:01,815 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 1565 mSDsluCounter, 1496 mSDsCounter, 0 mSdLazyCounter, 3662 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1565 SdHoareTripleChecker+Valid, 1547 SdHoareTripleChecker+Invalid, 3697 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 3662 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2022-11-22 01:16:01,815 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1565 Valid, 1547 Invalid, 3697 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 3662 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2022-11-22 01:16:01,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 540 states. [2022-11-22 01:16:01,822 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 540 to 207. [2022-11-22 01:16:01,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 207 states, 203 states have (on average 1.1773399014778325) internal successors, (239), 206 states have internal predecessors, (239), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:01,823 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207 states to 207 states and 239 transitions. [2022-11-22 01:16:01,824 INFO L78 Accepts]: Start accepts. Automaton has 207 states and 239 transitions. Word has length 29 [2022-11-22 01:16:01,824 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:16:01,824 INFO L495 AbstractCegarLoop]: Abstraction has 207 states and 239 transitions. [2022-11-22 01:16:01,824 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 50 states have (on average 1.68) internal successors, (84), 50 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:01,824 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 239 transitions. [2022-11-22 01:16:01,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-22 01:16:01,825 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:16:01,825 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:16:01,838 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-22 01:16:02,031 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-22 01:16:02,032 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:16:02,032 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:16:02,032 INFO L85 PathProgramCache]: Analyzing trace with hash 1651596666, now seen corresponding path program 4 times [2022-11-22 01:16:02,032 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:16:02,032 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [672464403] [2022-11-22 01:16:02,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:16:02,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:16:02,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:16:02,379 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:16:02,380 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:16:02,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [672464403] [2022-11-22 01:16:02,380 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [672464403] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:16:02,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1862945562] [2022-11-22 01:16:02,380 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:16:02,380 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:16:02,380 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:16:02,382 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:16:02,414 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-22 01:16:02,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:16:02,516 INFO L263 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-22 01:16:02,517 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:16:02,668 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:16:02,668 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:16:02,833 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 01:16:02,872 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:16:02,872 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1862945562] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:16:02,872 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [714776949] [2022-11-22 01:16:02,873 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:16:02,874 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:16:02,874 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:16:02,874 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:16:02,874 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:16:02,928 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:02,930 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:02,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:16:02,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:16:03,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:03,043 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:03,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:16:03,137 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:03,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:03,206 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:16:03,255 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:16:03,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:16:03,441 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:16:03,446 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:16:03,506 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-22 01:16:03,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-22 01:16:03,657 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:16:03,657 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:16:03,756 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:16:03,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:16:03,802 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:16:06,347 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8456#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:16:06,348 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:16:06,348 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:16:06,348 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9, 9] total 20 [2022-11-22 01:16:06,348 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [298876385] [2022-11-22 01:16:06,348 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:16:06,348 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-11-22 01:16:06,348 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:16:06,349 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-11-22 01:16:06,349 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=1047, Unknown=0, NotChecked=0, Total=1190 [2022-11-22 01:16:06,350 INFO L87 Difference]: Start difference. First operand 207 states and 239 transitions. Second operand has 21 states, 20 states have (on average 2.95) internal successors, (59), 21 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:06,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:16:06,892 INFO L93 Difference]: Finished difference Result 256 states and 282 transitions. [2022-11-22 01:16:06,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-22 01:16:06,892 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 20 states have (on average 2.95) internal successors, (59), 21 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-22 01:16:06,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:16:06,894 INFO L225 Difference]: With dead ends: 256 [2022-11-22 01:16:06,894 INFO L226 Difference]: Without dead ends: 256 [2022-11-22 01:16:06,894 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 106 GetRequests, 59 SyntacticMatches, 3 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 522 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=273, Invalid=1797, Unknown=0, NotChecked=0, Total=2070 [2022-11-22 01:16:06,895 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 159 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 325 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 159 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 336 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 325 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:16:06,895 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [159 Valid, 121 Invalid, 336 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 325 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:16:06,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2022-11-22 01:16:06,900 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 233. [2022-11-22 01:16:06,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 233 states, 229 states have (on average 1.1615720524017468) internal successors, (266), 232 states have internal predecessors, (266), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:06,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 233 states to 233 states and 266 transitions. [2022-11-22 01:16:06,901 INFO L78 Accepts]: Start accepts. Automaton has 233 states and 266 transitions. Word has length 29 [2022-11-22 01:16:06,902 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:16:06,902 INFO L495 AbstractCegarLoop]: Abstraction has 233 states and 266 transitions. [2022-11-22 01:16:06,902 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 20 states have (on average 2.95) internal successors, (59), 21 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:06,902 INFO L276 IsEmpty]: Start isEmpty. Operand 233 states and 266 transitions. [2022-11-22 01:16:06,903 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-22 01:16:06,903 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:16:06,903 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:16:06,911 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-11-22 01:16:07,109 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-22 01:16:07,109 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:16:07,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:16:07,110 INFO L85 PathProgramCache]: Analyzing trace with hash -382939349, now seen corresponding path program 7 times [2022-11-22 01:16:07,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:16:07,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [651473859] [2022-11-22 01:16:07,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:16:07,110 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:16:07,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:16:08,035 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 16 proven. 69 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:16:08,036 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:16:08,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [651473859] [2022-11-22 01:16:08,036 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [651473859] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:16:08,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2010950978] [2022-11-22 01:16:08,036 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:16:08,036 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:16:08,037 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:16:08,037 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:16:08,044 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-22 01:16:08,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:16:08,180 INFO L263 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-22 01:16:08,183 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:16:08,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:16:08,567 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:16:08,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 21 [2022-11-22 01:16:09,231 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:16:09,233 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:16:09,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 10 [2022-11-22 01:16:09,275 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 7 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:16:09,275 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:16:09,716 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:16:09,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-22 01:16:09,724 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:16:09,724 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-22 01:16:09,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:16:10,357 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 7 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:16:10,358 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2010950978] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:16:10,358 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1548169939] [2022-11-22 01:16:10,359 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:16:10,359 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:16:10,359 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:16:10,360 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:16:10,360 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:16:10,399 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:10,404 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:10,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:16:10,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:10,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:10,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:10,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:16:10,649 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:16:10,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:16:10,755 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:16:13,295 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9227#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:16:13,295 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:16:13,296 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:16:13,296 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 20, 20] total 54 [2022-11-22 01:16:13,296 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [355963403] [2022-11-22 01:16:13,296 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:16:13,297 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-22 01:16:13,297 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:16:13,297 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-22 01:16:13,298 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=181, Invalid=3707, Unknown=18, NotChecked=0, Total=3906 [2022-11-22 01:16:13,298 INFO L87 Difference]: Start difference. First operand 233 states and 266 transitions. Second operand has 54 states, 54 states have (on average 1.7777777777777777) internal successors, (96), 54 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:19,820 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:16:19,820 INFO L93 Difference]: Finished difference Result 859 states and 935 transitions. [2022-11-22 01:16:19,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-11-22 01:16:19,821 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 1.7777777777777777) internal successors, (96), 54 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-22 01:16:19,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:16:19,824 INFO L225 Difference]: With dead ends: 859 [2022-11-22 01:16:19,824 INFO L226 Difference]: Without dead ends: 805 [2022-11-22 01:16:19,825 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1476 ImplicationChecksByTransitivity, 8.5s TimeCoverageRelationStatistics Valid=718, Invalid=8770, Unknown=18, NotChecked=0, Total=9506 [2022-11-22 01:16:19,826 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 1993 mSDsluCounter, 1908 mSDsCounter, 0 mSdLazyCounter, 4380 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1993 SdHoareTripleChecker+Valid, 1968 SdHoareTripleChecker+Invalid, 4446 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 4380 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2022-11-22 01:16:19,826 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1993 Valid, 1968 Invalid, 4446 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 4380 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2022-11-22 01:16:19,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 805 states. [2022-11-22 01:16:19,835 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 805 to 274. [2022-11-22 01:16:19,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 270 states have (on average 1.162962962962963) internal successors, (314), 273 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:19,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 314 transitions. [2022-11-22 01:16:19,836 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 314 transitions. Word has length 33 [2022-11-22 01:16:19,836 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:16:19,837 INFO L495 AbstractCegarLoop]: Abstraction has 274 states and 314 transitions. [2022-11-22 01:16:19,837 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 1.7777777777777777) internal successors, (96), 54 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:19,837 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 314 transitions. [2022-11-22 01:16:19,838 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-22 01:16:19,838 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:16:19,838 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:16:19,843 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-11-22 01:16:20,043 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:16:20,044 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:16:20,044 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:16:20,044 INFO L85 PathProgramCache]: Analyzing trace with hash 53024798, now seen corresponding path program 5 times [2022-11-22 01:16:20,044 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:16:20,044 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1761880826] [2022-11-22 01:16:20,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:16:20,044 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:16:20,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:16:21,176 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 12 proven. 20 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:16:21,176 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:16:21,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1761880826] [2022-11-22 01:16:21,178 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1761880826] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:16:21,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1575433494] [2022-11-22 01:16:21,178 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:16:21,179 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:16:21,179 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:16:21,180 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:16:21,189 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-22 01:16:21,414 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-22 01:16:21,414 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:16:21,417 INFO L263 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 80 conjunts are in the unsatisfiable core [2022-11-22 01:16:21,419 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:16:21,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:16:21,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:16:21,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:16:21,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:16:22,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 01:16:22,038 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 10 proven. 22 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:16:22,039 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:16:22,118 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_634 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_634) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 1)) 0)) is different from false [2022-11-22 01:16:22,204 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:16:22,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:16:22,210 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:16:22,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:16:22,213 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:16:22,556 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 13 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 10 not checked. [2022-11-22 01:16:22,556 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1575433494] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:16:22,556 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1394993431] [2022-11-22 01:16:22,558 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:16:22,558 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:16:22,558 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:16:22,558 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:16:22,559 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:16:22,609 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:22,613 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:22,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:16:22,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:22,706 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:22,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:22,777 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:22,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:22,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:22,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:16:22,950 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:16:22,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:16:23,051 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:16:23,056 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:16:23,110 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-22 01:16:23,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-22 01:16:23,274 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:16:23,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:16:23,387 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:16:23,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:16:23,439 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:16:26,411 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10677#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:16:26,412 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:16:26,412 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:16:26,412 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 17, 15] total 40 [2022-11-22 01:16:26,412 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496882524] [2022-11-22 01:16:26,412 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:16:26,412 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-11-22 01:16:26,412 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:16:26,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-11-22 01:16:26,413 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=235, Invalid=2512, Unknown=13, NotChecked=102, Total=2862 [2022-11-22 01:16:26,413 INFO L87 Difference]: Start difference. First operand 274 states and 314 transitions. Second operand has 40 states, 40 states have (on average 2.15) internal successors, (86), 40 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:27,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:16:27,639 INFO L93 Difference]: Finished difference Result 328 states and 368 transitions. [2022-11-22 01:16:27,640 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-22 01:16:27,640 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 2.15) internal successors, (86), 40 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-22 01:16:27,640 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:16:27,641 INFO L225 Difference]: With dead ends: 328 [2022-11-22 01:16:27,641 INFO L226 Difference]: Without dead ends: 298 [2022-11-22 01:16:27,642 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 68 SyntacticMatches, 4 SemanticMatches, 67 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1207 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=420, Invalid=4126, Unknown=14, NotChecked=132, Total=4692 [2022-11-22 01:16:27,642 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 107 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 524 mSolverCounterSat, 27 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 596 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 524 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 44 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:16:27,643 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 158 Invalid, 596 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 524 Invalid, 1 Unknown, 44 Unchecked, 0.3s Time] [2022-11-22 01:16:27,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 298 states. [2022-11-22 01:16:27,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 298 to 285. [2022-11-22 01:16:27,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 281 states have (on average 1.1565836298932384) internal successors, (325), 284 states have internal predecessors, (325), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:27,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 325 transitions. [2022-11-22 01:16:27,649 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 325 transitions. Word has length 34 [2022-11-22 01:16:27,649 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:16:27,649 INFO L495 AbstractCegarLoop]: Abstraction has 285 states and 325 transitions. [2022-11-22 01:16:27,649 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 40 states have (on average 2.15) internal successors, (86), 40 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:27,649 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 325 transitions. [2022-11-22 01:16:27,650 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-22 01:16:27,650 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:16:27,650 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:16:27,659 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-22 01:16:27,856 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:16:27,856 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:16:27,857 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:16:27,857 INFO L85 PathProgramCache]: Analyzing trace with hash -1026267007, now seen corresponding path program 1 times [2022-11-22 01:16:27,857 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:16:27,857 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [796849750] [2022-11-22 01:16:27,857 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:16:27,857 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:16:27,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:16:28,571 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 17 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:16:28,572 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:16:28,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [796849750] [2022-11-22 01:16:28,572 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [796849750] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:16:28,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [999653636] [2022-11-22 01:16:28,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:16:28,572 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:16:28,572 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:16:28,574 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:16:28,576 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-22 01:16:28,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:16:28,707 INFO L263 TraceCheckSpWp]: Trace formula consists of 249 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-22 01:16:28,709 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:16:28,720 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:28,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:16:28,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:16:29,457 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 21 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:16:29,458 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:16:30,326 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 21 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:16:30,327 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [999653636] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:16:30,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [644994287] [2022-11-22 01:16:30,330 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 01:16:30,330 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:16:30,330 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:16:30,331 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:16:30,331 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:16:30,376 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:30,380 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:30,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:16:30,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:16:30,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:30,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:30,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:30,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:30,664 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:30,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:16:30,755 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:16:30,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:16:30,985 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:16:30,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:16:31,109 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:16:31,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:16:31,211 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:16:31,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:16:31,279 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:16:34,262 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11577#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:16:34,262 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:16:34,262 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:16:34,262 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 14, 14] total 41 [2022-11-22 01:16:34,262 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2052835294] [2022-11-22 01:16:34,263 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:16:34,263 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-11-22 01:16:34,263 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:16:34,264 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-11-22 01:16:34,264 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=217, Invalid=2753, Unknown=0, NotChecked=0, Total=2970 [2022-11-22 01:16:34,264 INFO L87 Difference]: Start difference. First operand 285 states and 325 transitions. Second operand has 42 states, 41 states have (on average 2.292682926829268) internal successors, (94), 42 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:43,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:16:43,013 INFO L93 Difference]: Finished difference Result 619 states and 686 transitions. [2022-11-22 01:16:43,014 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 86 states. [2022-11-22 01:16:43,014 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 41 states have (on average 2.292682926829268) internal successors, (94), 42 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-22 01:16:43,014 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:16:43,016 INFO L225 Difference]: With dead ends: 619 [2022-11-22 01:16:43,016 INFO L226 Difference]: Without dead ends: 617 [2022-11-22 01:16:43,018 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 132 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4932 ImplicationChecksByTransitivity, 12.3s TimeCoverageRelationStatistics Valid=2133, Invalid=15689, Unknown=0, NotChecked=0, Total=17822 [2022-11-22 01:16:43,019 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 898 mSDsluCounter, 160 mSDsCounter, 0 mSdLazyCounter, 906 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 898 SdHoareTripleChecker+Valid, 167 SdHoareTripleChecker+Invalid, 985 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 906 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-22 01:16:43,019 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [898 Valid, 167 Invalid, 985 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 906 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-22 01:16:43,020 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 617 states. [2022-11-22 01:16:43,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 617 to 292. [2022-11-22 01:16:43,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 288 states have (on average 1.1527777777777777) internal successors, (332), 291 states have internal predecessors, (332), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:43,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 332 transitions. [2022-11-22 01:16:43,028 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 332 transitions. Word has length 34 [2022-11-22 01:16:43,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:16:43,029 INFO L495 AbstractCegarLoop]: Abstraction has 292 states and 332 transitions. [2022-11-22 01:16:43,029 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 41 states have (on average 2.292682926829268) internal successors, (94), 42 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:43,029 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 332 transitions. [2022-11-22 01:16:43,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-22 01:16:43,030 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:16:43,030 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:16:43,040 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2022-11-22 01:16:43,236 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31,18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:16:43,236 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:16:43,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:16:43,237 INFO L85 PathProgramCache]: Analyzing trace with hash -1026276043, now seen corresponding path program 1 times [2022-11-22 01:16:43,237 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:16:43,237 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1583827084] [2022-11-22 01:16:43,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:16:43,238 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:16:43,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:16:44,138 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 19 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:16:44,139 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:16:44,139 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1583827084] [2022-11-22 01:16:44,139 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1583827084] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:16:44,139 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [749166506] [2022-11-22 01:16:44,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:16:44,139 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:16:44,139 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:16:44,140 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:16:44,162 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-22 01:16:44,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:16:44,295 INFO L263 TraceCheckSpWp]: Trace formula consists of 262 conjuncts, 67 conjunts are in the unsatisfiable core [2022-11-22 01:16:44,297 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:16:44,348 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:44,349 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:16:44,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:16:45,583 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 0 proven. 23 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:16:45,583 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:16:46,793 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:16:46,864 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 0 proven. 23 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:16:46,864 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [749166506] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:16:46,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1100873935] [2022-11-22 01:16:46,865 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:16:46,866 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:16:46,866 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:16:46,866 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:16:46,866 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:16:46,908 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:46,912 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:16:46,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:16:46,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:16:47,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:47,040 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:47,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:16:47,132 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:47,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:16:47,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:16:47,254 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:16:47,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:16:47,446 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:16:47,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:16:47,544 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:16:47,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:16:47,643 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:16:47,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:16:47,692 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:16:51,681 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12908#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:16:51,681 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:16:51,681 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:16:51,681 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 17, 18] total 49 [2022-11-22 01:16:51,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1324206997] [2022-11-22 01:16:51,681 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:16:51,682 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-11-22 01:16:51,682 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:16:51,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-11-22 01:16:51,683 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=395, Invalid=3895, Unknown=0, NotChecked=0, Total=4290 [2022-11-22 01:16:51,683 INFO L87 Difference]: Start difference. First operand 292 states and 332 transitions. Second operand has 51 states, 50 states have (on average 1.92) internal successors, (96), 50 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:57,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:16:57,557 INFO L93 Difference]: Finished difference Result 515 states and 571 transitions. [2022-11-22 01:16:57,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-11-22 01:16:57,557 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 50 states have (on average 1.92) internal successors, (96), 50 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-22 01:16:57,557 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:16:57,559 INFO L225 Difference]: With dead ends: 515 [2022-11-22 01:16:57,559 INFO L226 Difference]: Without dead ends: 486 [2022-11-22 01:16:57,561 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3357 ImplicationChecksByTransitivity, 11.0s TimeCoverageRelationStatistics Valid=1845, Invalid=10365, Unknown=0, NotChecked=0, Total=12210 [2022-11-22 01:16:57,562 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 1222 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 907 mSolverCounterSat, 128 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1222 SdHoareTripleChecker+Valid, 99 SdHoareTripleChecker+Invalid, 1035 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 128 IncrementalHoareTripleChecker+Valid, 907 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-22 01:16:57,562 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1222 Valid, 99 Invalid, 1035 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [128 Valid, 907 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-22 01:16:57,563 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 486 states. [2022-11-22 01:16:57,568 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 486 to 317. [2022-11-22 01:16:57,568 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 317 states, 313 states have (on average 1.1693290734824282) internal successors, (366), 316 states have internal predecessors, (366), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:57,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 366 transitions. [2022-11-22 01:16:57,569 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 366 transitions. Word has length 34 [2022-11-22 01:16:57,570 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:16:57,570 INFO L495 AbstractCegarLoop]: Abstraction has 317 states and 366 transitions. [2022-11-22 01:16:57,570 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 50 states have (on average 1.92) internal successors, (96), 50 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:16:57,570 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 366 transitions. [2022-11-22 01:16:57,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-22 01:16:57,571 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:16:57,571 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:16:57,588 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2022-11-22 01:16:57,777 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:16:57,777 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:16:57,777 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:16:57,777 INFO L85 PathProgramCache]: Analyzing trace with hash 1220287728, now seen corresponding path program 1 times [2022-11-22 01:16:57,778 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:16:57,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [986773738] [2022-11-22 01:16:57,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:16:57,778 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:16:57,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:16:58,440 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 18 proven. 55 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-22 01:16:58,440 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:16:58,440 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [986773738] [2022-11-22 01:16:58,440 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [986773738] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:16:58,441 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1338290858] [2022-11-22 01:16:58,441 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:16:58,441 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:16:58,441 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:16:58,451 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:16:58,478 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-22 01:16:58,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:16:58,608 INFO L263 TraceCheckSpWp]: Trace formula consists of 268 conjuncts, 67 conjunts are in the unsatisfiable core [2022-11-22 01:16:58,610 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:16:58,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:16:59,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:16:59,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:16:59,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 01:16:59,395 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 18 proven. 55 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-22 01:16:59,396 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:16:59,611 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:16:59,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-22 01:16:59,621 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:16:59,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 37 [2022-11-22 01:16:59,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:17:00,336 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 18 proven. 55 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-22 01:17:00,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1338290858] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:17:00,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1931995883] [2022-11-22 01:17:00,338 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 01:17:00,338 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:17:00,339 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:17:00,339 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:17:00,339 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:17:00,383 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:00,390 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:00,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:17:00,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:17:00,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:00,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:00,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:17:00,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:00,598 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:00,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:17:00,691 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:17:00,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:17:00,776 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:17:02,589 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14093#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:17:02,589 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:17:02,589 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:17:02,589 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 44 [2022-11-22 01:17:02,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1960284370] [2022-11-22 01:17:02,590 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:17:02,590 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-11-22 01:17:02,590 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:17:02,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-11-22 01:17:02,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=172, Invalid=2690, Unknown=0, NotChecked=0, Total=2862 [2022-11-22 01:17:02,591 INFO L87 Difference]: Start difference. First operand 317 states and 366 transitions. Second operand has 44 states, 44 states have (on average 1.8181818181818181) internal successors, (80), 44 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:04,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:17:04,280 INFO L93 Difference]: Finished difference Result 599 states and 663 transitions. [2022-11-22 01:17:04,280 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-22 01:17:04,280 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 1.8181818181818181) internal successors, (80), 44 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-22 01:17:04,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:17:04,282 INFO L225 Difference]: With dead ends: 599 [2022-11-22 01:17:04,282 INFO L226 Difference]: Without dead ends: 599 [2022-11-22 01:17:04,283 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 135 GetRequests, 68 SyntacticMatches, 1 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 900 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=345, Invalid=4211, Unknown=0, NotChecked=0, Total=4556 [2022-11-22 01:17:04,283 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 449 mSDsluCounter, 1217 mSDsCounter, 0 mSdLazyCounter, 1770 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 449 SdHoareTripleChecker+Valid, 1270 SdHoareTripleChecker+Invalid, 1807 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 1770 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:17:04,284 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [449 Valid, 1270 Invalid, 1807 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 1770 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-22 01:17:04,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 599 states. [2022-11-22 01:17:04,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 599 to 317. [2022-11-22 01:17:04,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 317 states, 313 states have (on average 1.1693290734824282) internal successors, (366), 316 states have internal predecessors, (366), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:04,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 366 transitions. [2022-11-22 01:17:04,291 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 366 transitions. Word has length 35 [2022-11-22 01:17:04,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:17:04,291 INFO L495 AbstractCegarLoop]: Abstraction has 317 states and 366 transitions. [2022-11-22 01:17:04,292 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 1.8181818181818181) internal successors, (80), 44 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:04,292 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 366 transitions. [2022-11-22 01:17:04,292 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-22 01:17:04,292 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:17:04,292 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:17:04,303 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2022-11-22 01:17:04,498 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-11-22 01:17:04,498 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:17:04,499 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:17:04,499 INFO L85 PathProgramCache]: Analyzing trace with hash 851942947, now seen corresponding path program 6 times [2022-11-22 01:17:04,499 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:17:04,499 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1288713662] [2022-11-22 01:17:04,499 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:17:04,499 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:17:04,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:17:05,512 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 11 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:17:05,512 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:17:05,512 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1288713662] [2022-11-22 01:17:05,512 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1288713662] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:17:05,512 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1267445518] [2022-11-22 01:17:05,512 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:17:05,513 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:17:05,513 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:17:05,514 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:17:05,516 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-22 01:17:05,702 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:17:05,702 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:17:05,705 INFO L263 TraceCheckSpWp]: Trace formula consists of 279 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-22 01:17:05,707 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:17:05,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:17:06,028 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-22 01:17:06,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 46 treesize of output 54 [2022-11-22 01:17:06,038 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 01:17:06,063 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:17:06,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 20 [2022-11-22 01:17:06,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-11-22 01:17:06,405 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:17:06,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 11 [2022-11-22 01:17:06,409 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 9 proven. 19 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:17:06,410 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:17:06,425 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_831 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_831) |c_ULTIMATE.start_cstrncat_~s2#1.base|) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) 0)) is different from false [2022-11-22 01:17:06,784 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:17:06,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 79 treesize of output 79 [2022-11-22 01:17:06,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 57 [2022-11-22 01:17:06,815 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:17:06,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 53 treesize of output 63 [2022-11-22 01:17:07,162 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 14 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 4 not checked. [2022-11-22 01:17:07,162 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1267445518] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:17:07,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [477124577] [2022-11-22 01:17:07,164 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:17:07,164 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:17:07,164 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:17:07,165 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:17:07,165 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:17:07,208 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:07,211 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:07,212 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:17:07,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:07,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:07,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:07,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:07,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:07,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:07,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:17:07,584 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:17:07,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:17:07,728 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:17:07,732 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:17:07,788 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-22 01:17:07,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-22 01:17:07,938 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:17:07,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:17:08,015 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:17:08,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:17:08,066 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:17:11,310 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15305#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:17:11,310 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:17:11,310 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:17:11,311 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 21, 20] total 48 [2022-11-22 01:17:11,311 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [641257087] [2022-11-22 01:17:11,311 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:17:11,311 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-22 01:17:11,311 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:17:11,312 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-22 01:17:11,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=299, Invalid=3355, Unknown=10, NotChecked=118, Total=3782 [2022-11-22 01:17:11,312 INFO L87 Difference]: Start difference. First operand 317 states and 366 transitions. Second operand has 48 states, 48 states have (on average 1.6041666666666667) internal successors, (77), 48 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:12,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:17:12,970 INFO L93 Difference]: Finished difference Result 608 states and 686 transitions. [2022-11-22 01:17:12,970 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-22 01:17:12,970 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 1.6041666666666667) internal successors, (77), 48 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-22 01:17:12,971 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:17:12,973 INFO L225 Difference]: With dead ends: 608 [2022-11-22 01:17:12,973 INFO L226 Difference]: Without dead ends: 548 [2022-11-22 01:17:12,973 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 67 SyntacticMatches, 4 SemanticMatches, 79 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1970 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=597, Invalid=5717, Unknown=10, NotChecked=156, Total=6480 [2022-11-22 01:17:12,974 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 254 mSDsluCounter, 318 mSDsCounter, 0 mSdLazyCounter, 920 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 254 SdHoareTripleChecker+Valid, 342 SdHoareTripleChecker+Invalid, 1007 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 920 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 53 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 01:17:12,974 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [254 Valid, 342 Invalid, 1007 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 920 Invalid, 0 Unknown, 53 Unchecked, 0.6s Time] [2022-11-22 01:17:12,975 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 548 states. [2022-11-22 01:17:12,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 548 to 347. [2022-11-22 01:17:12,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 343 states have (on average 1.1690962099125364) internal successors, (401), 346 states have internal predecessors, (401), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:12,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 401 transitions. [2022-11-22 01:17:12,985 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 401 transitions. Word has length 36 [2022-11-22 01:17:12,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:17:12,986 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 401 transitions. [2022-11-22 01:17:12,986 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 1.6041666666666667) internal successors, (77), 48 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:12,986 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 401 transitions. [2022-11-22 01:17:12,987 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-22 01:17:12,987 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:17:12,987 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:17:13,002 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-22 01:17:13,193 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-22 01:17:13,194 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:17:13,194 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:17:13,194 INFO L85 PathProgramCache]: Analyzing trace with hash 359132511, now seen corresponding path program 8 times [2022-11-22 01:17:13,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:17:13,194 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1414102483] [2022-11-22 01:17:13,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:17:13,195 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:17:13,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:17:14,432 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 25 proven. 88 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:17:14,432 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:17:14,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1414102483] [2022-11-22 01:17:14,432 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1414102483] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:17:14,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1707929731] [2022-11-22 01:17:14,432 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:17:14,432 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:17:14,433 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:17:14,433 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:17:14,436 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-22 01:17:14,633 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-11-22 01:17:14,633 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:17:14,637 INFO L263 TraceCheckSpWp]: Trace formula consists of 279 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-22 01:17:14,640 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:17:14,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:17:15,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:17:15,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:17:15,811 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-22 01:17:15,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-22 01:17:15,857 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 8 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:17:15,857 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:17:16,333 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_881 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_881) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 7 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-22 01:17:16,339 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:17:16,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-22 01:17:16,345 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:17:16,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-22 01:17:16,647 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 8 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:17:16,647 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1707929731] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:17:16,647 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [678599698] [2022-11-22 01:17:16,648 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:17:16,648 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:17:16,649 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:17:16,649 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:17:16,649 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:17:16,689 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:16,692 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:16,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:17:16,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:17:16,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:16,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:16,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:17:16,913 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:17:16,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:17:17,046 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:17:19,570 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16581#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:17:19,570 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:17:19,570 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:17:19,571 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 22, 22] total 52 [2022-11-22 01:17:19,571 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1001649442] [2022-11-22 01:17:19,571 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:17:19,571 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-11-22 01:17:19,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:17:19,572 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-11-22 01:17:19,572 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=198, Invalid=3345, Unknown=1, NotChecked=116, Total=3660 [2022-11-22 01:17:19,573 INFO L87 Difference]: Start difference. First operand 347 states and 401 transitions. Second operand has 52 states, 52 states have (on average 1.8076923076923077) internal successors, (94), 52 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:28,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:17:28,788 INFO L93 Difference]: Finished difference Result 1088 states and 1190 transitions. [2022-11-22 01:17:28,788 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-22 01:17:28,789 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 52 states have (on average 1.8076923076923077) internal successors, (94), 52 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-22 01:17:28,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:17:28,792 INFO L225 Difference]: With dead ends: 1088 [2022-11-22 01:17:28,792 INFO L226 Difference]: Without dead ends: 1030 [2022-11-22 01:17:28,793 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 67 SyntacticMatches, 2 SemanticMatches, 105 ConstructedPredicates, 1 IntricatePredicates, 8 DeprecatedPredicates, 2311 ImplicationChecksByTransitivity, 10.2s TimeCoverageRelationStatistics Valid=955, Invalid=10178, Unknown=1, NotChecked=208, Total=11342 [2022-11-22 01:17:28,794 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 1571 mSDsluCounter, 1858 mSDsCounter, 0 mSdLazyCounter, 4250 mSolverCounterSat, 59 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1571 SdHoareTripleChecker+Valid, 1921 SdHoareTripleChecker+Invalid, 4527 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 4250 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 217 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:17:28,794 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1571 Valid, 1921 Invalid, 4527 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 4250 Invalid, 1 Unknown, 217 Unchecked, 3.4s Time] [2022-11-22 01:17:28,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1030 states. [2022-11-22 01:17:28,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1030 to 394. [2022-11-22 01:17:28,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 394 states, 390 states have (on average 1.1717948717948719) internal successors, (457), 393 states have internal predecessors, (457), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:28,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 394 states to 394 states and 457 transitions. [2022-11-22 01:17:28,806 INFO L78 Accepts]: Start accepts. Automaton has 394 states and 457 transitions. Word has length 37 [2022-11-22 01:17:28,806 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:17:28,806 INFO L495 AbstractCegarLoop]: Abstraction has 394 states and 457 transitions. [2022-11-22 01:17:28,807 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 52 states have (on average 1.8076923076923077) internal successors, (94), 52 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:28,807 INFO L276 IsEmpty]: Start isEmpty. Operand 394 states and 457 transitions. [2022-11-22 01:17:28,808 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-22 01:17:28,808 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:17:28,808 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:17:28,822 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-22 01:17:29,014 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-22 01:17:29,014 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:17:29,015 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:17:29,015 INFO L85 PathProgramCache]: Analyzing trace with hash 1091621299, now seen corresponding path program 7 times [2022-11-22 01:17:29,015 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:17:29,015 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [549434395] [2022-11-22 01:17:29,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:17:29,015 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:17:29,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:17:29,482 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 1 proven. 32 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:17:29,482 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:17:29,482 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [549434395] [2022-11-22 01:17:29,482 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [549434395] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:17:29,482 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [7536790] [2022-11-22 01:17:29,482 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:17:29,482 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:17:29,483 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:17:29,484 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:17:29,502 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-22 01:17:29,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:17:29,645 INFO L263 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-22 01:17:29,646 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:17:29,799 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 4 proven. 29 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:17:29,799 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:17:30,008 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 01:17:30,070 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 4 proven. 29 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:17:30,070 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [7536790] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:17:30,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1197891553] [2022-11-22 01:17:30,072 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:17:30,072 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:17:30,072 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:17:30,072 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:17:30,073 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:17:30,108 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:30,111 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:30,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:17:30,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:30,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:30,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:30,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:17:30,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:30,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:30,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:17:30,426 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:17:30,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:17:30,547 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:17:30,551 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:17:30,605 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-22 01:17:30,606 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-22 01:17:30,737 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:17:30,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:17:30,821 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:17:30,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:17:30,864 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:17:33,497 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18411#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:17:33,497 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:17:33,497 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:17:33,497 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 11, 11] total 24 [2022-11-22 01:17:33,497 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [797696946] [2022-11-22 01:17:33,497 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:17:33,498 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-22 01:17:33,498 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:17:33,498 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-22 01:17:33,498 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=163, Invalid=1319, Unknown=0, NotChecked=0, Total=1482 [2022-11-22 01:17:33,499 INFO L87 Difference]: Start difference. First operand 394 states and 457 transitions. Second operand has 25 states, 24 states have (on average 3.0416666666666665) internal successors, (73), 25 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:34,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:17:34,299 INFO L93 Difference]: Finished difference Result 677 states and 764 transitions. [2022-11-22 01:17:34,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-22 01:17:34,300 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 3.0416666666666665) internal successors, (73), 25 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-22 01:17:34,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:17:34,303 INFO L225 Difference]: With dead ends: 677 [2022-11-22 01:17:34,303 INFO L226 Difference]: Without dead ends: 677 [2022-11-22 01:17:34,303 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 83 SyntacticMatches, 4 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 758 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=378, Invalid=2484, Unknown=0, NotChecked=0, Total=2862 [2022-11-22 01:17:34,303 INFO L413 NwaCegarLoop]: 22 mSDtfsCounter, 312 mSDsluCounter, 145 mSDsCounter, 0 mSdLazyCounter, 484 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 167 SdHoareTripleChecker+Invalid, 497 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 484 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:17:34,303 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [312 Valid, 167 Invalid, 497 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 484 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 01:17:34,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 677 states. [2022-11-22 01:17:34,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 677 to 491. [2022-11-22 01:17:34,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 491 states, 487 states have (on average 1.188911704312115) internal successors, (579), 490 states have internal predecessors, (579), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:34,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 579 transitions. [2022-11-22 01:17:34,314 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 579 transitions. Word has length 38 [2022-11-22 01:17:34,314 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:17:34,314 INFO L495 AbstractCegarLoop]: Abstraction has 491 states and 579 transitions. [2022-11-22 01:17:34,314 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 3.0416666666666665) internal successors, (73), 25 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:34,314 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 579 transitions. [2022-11-22 01:17:34,315 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-22 01:17:34,315 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:17:34,315 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:17:34,323 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-22 01:17:34,522 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-22 01:17:34,522 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:17:34,523 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:17:34,523 INFO L85 PathProgramCache]: Analyzing trace with hash 1804734954, now seen corresponding path program 1 times [2022-11-22 01:17:34,523 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:17:34,523 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1433343529] [2022-11-22 01:17:34,523 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:17:34,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:17:34,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:17:35,463 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 9 proven. 28 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 01:17:35,463 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:17:35,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1433343529] [2022-11-22 01:17:35,463 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1433343529] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:17:35,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1967763581] [2022-11-22 01:17:35,464 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:17:35,464 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:17:35,464 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:17:35,467 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:17:35,499 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-22 01:17:35,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:17:35,651 INFO L263 TraceCheckSpWp]: Trace formula consists of 290 conjuncts, 67 conjunts are in the unsatisfiable core [2022-11-22 01:17:35,653 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:17:35,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:17:35,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:17:35,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:17:36,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:17:36,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 01:17:36,088 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 9 proven. 19 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-22 01:17:36,088 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:17:36,114 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_990 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_990) |c_ULTIMATE.start_cstrncat_~s2#1.base|) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) 0)) is different from false [2022-11-22 01:17:36,184 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_990 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_990) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~s2#1.offset|)) 0)) is different from false [2022-11-22 01:17:36,205 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:17:36,206 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:17:36,213 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:17:36,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:17:36,218 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:17:36,424 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 9 proven. 11 refuted. 0 times theorem prover too weak. 11 trivial. 8 not checked. [2022-11-22 01:17:36,424 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1967763581] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:17:36,424 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1752650578] [2022-11-22 01:17:36,425 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:17:36,425 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:17:36,426 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:17:36,426 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:17:36,426 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:17:36,462 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:36,469 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:36,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:17:36,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:17:36,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:36,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:36,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:36,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:36,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:36,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:17:36,807 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:17:36,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:17:36,964 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:17:36,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:17:37,049 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:17:37,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:17:37,127 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:17:37,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:17:37,165 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:17:40,651 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19884#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:17:40,651 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:17:40,652 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:17:40,652 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 15, 15] total 39 [2022-11-22 01:17:40,652 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [632579765] [2022-11-22 01:17:40,652 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:17:40,652 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-11-22 01:17:40,652 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:17:40,653 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-11-22 01:17:40,653 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=221, Invalid=2426, Unknown=13, NotChecked=202, Total=2862 [2022-11-22 01:17:40,653 INFO L87 Difference]: Start difference. First operand 491 states and 579 transitions. Second operand has 39 states, 39 states have (on average 2.128205128205128) internal successors, (83), 39 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:41,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:17:41,908 INFO L93 Difference]: Finished difference Result 640 states and 716 transitions. [2022-11-22 01:17:41,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-22 01:17:41,909 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 2.128205128205128) internal successors, (83), 39 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-22 01:17:41,909 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:17:41,910 INFO L225 Difference]: With dead ends: 640 [2022-11-22 01:17:41,910 INFO L226 Difference]: Without dead ends: 535 [2022-11-22 01:17:41,910 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 82 SyntacticMatches, 2 SemanticMatches, 71 ConstructedPredicates, 2 IntricatePredicates, 1 DeprecatedPredicates, 1552 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=403, Invalid=4559, Unknown=16, NotChecked=278, Total=5256 [2022-11-22 01:17:41,911 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 153 mSDsluCounter, 313 mSDsCounter, 0 mSdLazyCounter, 714 mSolverCounterSat, 21 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 341 SdHoareTripleChecker+Invalid, 842 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 714 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 103 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:17:41,911 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [153 Valid, 341 Invalid, 842 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 714 Invalid, 4 Unknown, 103 Unchecked, 0.4s Time] [2022-11-22 01:17:41,911 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2022-11-22 01:17:41,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 487. [2022-11-22 01:17:41,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 487 states, 483 states have (on average 1.1511387163561078) internal successors, (556), 486 states have internal predecessors, (556), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:41,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 487 states to 487 states and 556 transitions. [2022-11-22 01:17:41,920 INFO L78 Accepts]: Start accepts. Automaton has 487 states and 556 transitions. Word has length 38 [2022-11-22 01:17:41,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:17:41,920 INFO L495 AbstractCegarLoop]: Abstraction has 487 states and 556 transitions. [2022-11-22 01:17:41,921 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 2.128205128205128) internal successors, (83), 39 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:17:41,921 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 556 transitions. [2022-11-22 01:17:41,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-22 01:17:41,922 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:17:41,922 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:17:41,931 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2022-11-22 01:17:42,128 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-22 01:17:42,128 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:17:42,128 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:17:42,128 INFO L85 PathProgramCache]: Analyzing trace with hash 725443149, now seen corresponding path program 2 times [2022-11-22 01:17:42,128 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:17:42,128 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [657012945] [2022-11-22 01:17:42,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:17:42,129 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:17:42,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:17:42,956 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:17:42,956 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:17:42,956 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [657012945] [2022-11-22 01:17:42,956 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [657012945] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:17:42,956 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [750872580] [2022-11-22 01:17:42,957 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:17:42,957 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:17:42,957 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:17:42,958 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:17:42,986 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-22 01:17:43,299 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-22 01:17:43,299 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:17:43,301 INFO L263 TraceCheckSpWp]: Trace formula consists of 273 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-22 01:17:43,307 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:17:43,380 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:43,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:17:43,389 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:17:44,510 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 0 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:17:44,510 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:17:45,643 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:17:45,706 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 9 proven. 26 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:17:45,706 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [750872580] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:17:45,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [132504100] [2022-11-22 01:17:45,708 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 01:17:45,708 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:17:45,708 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:17:45,708 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:17:45,708 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:17:45,755 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:45,760 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:17:45,761 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:17:45,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:17:45,849 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:45,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:45,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:17:45,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:45,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:17:46,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:17:46,092 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:17:46,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:17:46,273 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:17:46,273 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:17:46,379 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:17:46,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:17:46,454 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:17:46,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:17:46,534 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:17:50,147 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21341#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:17:50,147 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:17:50,147 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:17:50,148 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 17] total 53 [2022-11-22 01:17:50,148 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [10825307] [2022-11-22 01:17:50,148 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:17:50,148 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-22 01:17:50,148 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:17:50,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-22 01:17:50,149 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=370, Invalid=4186, Unknown=0, NotChecked=0, Total=4556 [2022-11-22 01:17:50,149 INFO L87 Difference]: Start difference. First operand 487 states and 556 transitions. Second operand has 54 states, 53 states have (on average 2.1132075471698113) internal successors, (112), 54 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:18:02,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:18:02,035 INFO L93 Difference]: Finished difference Result 808 states and 878 transitions. [2022-11-22 01:18:02,035 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 81 states. [2022-11-22 01:18:02,035 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 53 states have (on average 2.1132075471698113) internal successors, (112), 54 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-22 01:18:02,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:18:02,039 INFO L225 Difference]: With dead ends: 808 [2022-11-22 01:18:02,039 INFO L226 Difference]: Without dead ends: 778 [2022-11-22 01:18:02,040 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 207 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 144 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5468 ImplicationChecksByTransitivity, 15.5s TimeCoverageRelationStatistics Valid=2956, Invalid=18214, Unknown=0, NotChecked=0, Total=21170 [2022-11-22 01:18:02,040 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 1428 mSDsluCounter, 344 mSDsCounter, 0 mSdLazyCounter, 3000 mSolverCounterSat, 145 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1428 SdHoareTripleChecker+Valid, 361 SdHoareTripleChecker+Invalid, 3145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 145 IncrementalHoareTripleChecker+Valid, 3000 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:18:02,040 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1428 Valid, 361 Invalid, 3145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [145 Valid, 3000 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-11-22 01:18:02,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 778 states. [2022-11-22 01:18:02,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 778 to 524. [2022-11-22 01:18:02,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 524 states, 520 states have (on average 1.148076923076923) internal successors, (597), 523 states have internal predecessors, (597), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:18:02,048 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 524 states to 524 states and 597 transitions. [2022-11-22 01:18:02,049 INFO L78 Accepts]: Start accepts. Automaton has 524 states and 597 transitions. Word has length 38 [2022-11-22 01:18:02,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:18:02,049 INFO L495 AbstractCegarLoop]: Abstraction has 524 states and 597 transitions. [2022-11-22 01:18:02,049 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 53 states have (on average 2.1132075471698113) internal successors, (112), 54 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:18:02,049 INFO L276 IsEmpty]: Start isEmpty. Operand 524 states and 597 transitions. [2022-11-22 01:18:02,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-22 01:18:02,050 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:18:02,051 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:18:02,059 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-22 01:18:02,257 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-22 01:18:02,257 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:18:02,257 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:18:02,257 INFO L85 PathProgramCache]: Analyzing trace with hash -265320173, now seen corresponding path program 9 times [2022-11-22 01:18:02,257 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:18:02,257 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [131246570] [2022-11-22 01:18:02,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:18:02,258 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:18:02,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:18:03,510 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 36 proven. 109 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:18:03,511 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:18:03,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [131246570] [2022-11-22 01:18:03,511 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [131246570] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:18:03,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1932580972] [2022-11-22 01:18:03,511 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:18:03,511 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:18:03,511 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:18:03,512 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:18:03,515 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-22 01:18:03,769 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:18:03,769 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:18:03,772 INFO L263 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 90 conjunts are in the unsatisfiable core [2022-11-22 01:18:03,775 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:18:04,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:18:04,417 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:18:04,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 25 [2022-11-22 01:18:05,714 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:18:05,715 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:18:05,716 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:18:05,717 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:18:05,725 INFO L321 Elim1Store]: treesize reduction 4, result has 66.7 percent of original size [2022-11-22 01:18:05,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 37 treesize of output 21 [2022-11-22 01:18:05,784 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 9 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:18:05,784 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:18:06,575 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:18:06,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 93 treesize of output 83 [2022-11-22 01:18:07,815 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 11 proven. 134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:18:07,816 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1932580972] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:18:07,816 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1780068503] [2022-11-22 01:18:07,817 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:18:07,817 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:18:07,818 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:18:07,818 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:18:07,818 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:18:07,878 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:18:07,881 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:18:07,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:18:07,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:18:07,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:18:07,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:18:08,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:18:08,083 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:18:08,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:18:08,168 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:18:10,527 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23153#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:18:10,527 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:18:10,528 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:18:10,528 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 26, 26] total 70 [2022-11-22 01:18:10,528 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [771999765] [2022-11-22 01:18:10,528 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:18:10,528 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 70 states [2022-11-22 01:18:10,528 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:18:10,528 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 70 interpolants. [2022-11-22 01:18:10,529 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=238, Invalid=5924, Unknown=0, NotChecked=0, Total=6162 [2022-11-22 01:18:10,529 INFO L87 Difference]: Start difference. First operand 524 states and 597 transitions. Second operand has 70 states, 70 states have (on average 1.7142857142857142) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:18:29,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:18:29,249 INFO L93 Difference]: Finished difference Result 1770 states and 1931 transitions. [2022-11-22 01:18:29,249 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 77 states. [2022-11-22 01:18:29,249 INFO L78 Accepts]: Start accepts. Automaton has has 70 states, 70 states have (on average 1.7142857142857142) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-22 01:18:29,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:18:29,253 INFO L225 Difference]: With dead ends: 1770 [2022-11-22 01:18:29,253 INFO L226 Difference]: Without dead ends: 1694 [2022-11-22 01:18:29,255 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 216 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 151 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4213 ImplicationChecksByTransitivity, 19.8s TimeCoverageRelationStatistics Valid=1848, Invalid=21408, Unknown=0, NotChecked=0, Total=23256 [2022-11-22 01:18:29,256 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 2652 mSDsluCounter, 2895 mSDsCounter, 0 mSdLazyCounter, 6934 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2652 SdHoareTripleChecker+Valid, 2965 SdHoareTripleChecker+Invalid, 7007 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 6934 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.9s IncrementalHoareTripleChecker+Time [2022-11-22 01:18:29,256 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2652 Valid, 2965 Invalid, 7007 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 6934 Invalid, 0 Unknown, 0 Unchecked, 4.9s Time] [2022-11-22 01:18:29,257 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1694 states. [2022-11-22 01:18:29,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1694 to 603. [2022-11-22 01:18:29,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 599 states have (on average 1.1469115191986645) internal successors, (687), 602 states have internal predecessors, (687), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:18:29,271 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 687 transitions. [2022-11-22 01:18:29,271 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 687 transitions. Word has length 41 [2022-11-22 01:18:29,271 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:18:29,271 INFO L495 AbstractCegarLoop]: Abstraction has 603 states and 687 transitions. [2022-11-22 01:18:29,272 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 70 states, 70 states have (on average 1.7142857142857142) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:18:29,272 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 687 transitions. [2022-11-22 01:18:29,273 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-22 01:18:29,273 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:18:29,273 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:18:29,284 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-22 01:18:29,480 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-22 01:18:29,480 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:18:29,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:18:29,480 INFO L85 PathProgramCache]: Analyzing trace with hash 1742417561, now seen corresponding path program 3 times [2022-11-22 01:18:29,480 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:18:29,480 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2049963673] [2022-11-22 01:18:29,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:18:29,481 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:18:29,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:18:30,462 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 4 proven. 43 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:18:30,463 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:18:30,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2049963673] [2022-11-22 01:18:30,463 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2049963673] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:18:30,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [719229610] [2022-11-22 01:18:30,463 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:18:30,463 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:18:30,463 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:18:30,464 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:18:30,466 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-22 01:18:30,676 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:18:30,676 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:18:30,679 INFO L263 TraceCheckSpWp]: Trace formula consists of 297 conjuncts, 71 conjunts are in the unsatisfiable core [2022-11-22 01:18:30,681 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:18:30,690 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:18:30,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:18:30,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:18:31,701 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 0 proven. 47 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:18:31,701 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:18:32,958 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 0 proven. 47 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:18:32,958 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [719229610] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:18:32,958 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1940921722] [2022-11-22 01:18:32,959 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 01:18:32,960 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:18:32,960 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:18:32,960 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:18:32,960 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:18:32,998 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:18:33,001 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:18:33,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:18:33,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:18:33,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:18:33,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:18:33,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:18:33,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:18:33,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:18:33,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:18:33,309 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:18:33,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:18:33,445 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:18:33,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:18:33,547 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:18:33,547 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:18:33,626 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:18:33,626 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:18:33,709 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:18:37,382 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25983#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:18:37,383 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:18:37,383 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:18:37,383 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 18, 18] total 53 [2022-11-22 01:18:37,383 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1210238273] [2022-11-22 01:18:37,383 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:18:37,383 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-22 01:18:37,383 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:18:37,384 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-22 01:18:37,384 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=273, Invalid=4283, Unknown=0, NotChecked=0, Total=4556 [2022-11-22 01:18:37,384 INFO L87 Difference]: Start difference. First operand 603 states and 687 transitions. Second operand has 54 states, 53 states have (on average 2.2264150943396226) internal successors, (118), 54 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:01,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:19:01,704 INFO L93 Difference]: Finished difference Result 1969 states and 2155 transitions. [2022-11-22 01:19:01,704 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 153 states. [2022-11-22 01:19:01,704 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 53 states have (on average 2.2264150943396226) internal successors, (118), 54 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-22 01:19:01,704 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:19:01,708 INFO L225 Difference]: With dead ends: 1969 [2022-11-22 01:19:01,708 INFO L226 Difference]: Without dead ends: 1965 [2022-11-22 01:19:01,710 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 212 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14240 ImplicationChecksByTransitivity, 28.0s TimeCoverageRelationStatistics Valid=5989, Invalid=39593, Unknown=0, NotChecked=0, Total=45582 [2022-11-22 01:19:01,710 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 2301 mSDsluCounter, 502 mSDsCounter, 0 mSdLazyCounter, 2599 mSolverCounterSat, 130 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2301 SdHoareTripleChecker+Valid, 519 SdHoareTripleChecker+Invalid, 2729 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 130 IncrementalHoareTripleChecker+Valid, 2599 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-22 01:19:01,711 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2301 Valid, 519 Invalid, 2729 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [130 Valid, 2599 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-11-22 01:19:01,712 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1965 states. [2022-11-22 01:19:01,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1965 to 641. [2022-11-22 01:19:01,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 641 states, 637 states have (on average 1.139717425431711) internal successors, (726), 640 states have internal predecessors, (726), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:01,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 641 states to 641 states and 726 transitions. [2022-11-22 01:19:01,728 INFO L78 Accepts]: Start accepts. Automaton has 641 states and 726 transitions. Word has length 42 [2022-11-22 01:19:01,728 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:19:01,728 INFO L495 AbstractCegarLoop]: Abstraction has 641 states and 726 transitions. [2022-11-22 01:19:01,728 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 53 states have (on average 2.2264150943396226) internal successors, (118), 54 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:01,728 INFO L276 IsEmpty]: Start isEmpty. Operand 641 states and 726 transitions. [2022-11-22 01:19:01,729 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-22 01:19:01,730 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:19:01,730 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:19:01,743 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-22 01:19:01,936 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:19:01,936 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:19:01,936 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:19:01,936 INFO L85 PathProgramCache]: Analyzing trace with hash 1742408525, now seen corresponding path program 2 times [2022-11-22 01:19:01,937 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:19:01,937 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [170521017] [2022-11-22 01:19:01,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:19:01,937 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:19:01,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:19:03,055 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 8 proven. 41 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:19:03,056 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:19:03,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [170521017] [2022-11-22 01:19:03,056 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [170521017] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:19:03,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1131353450] [2022-11-22 01:19:03,056 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:19:03,056 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:19:03,056 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:19:03,057 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:19:03,064 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-22 01:19:03,290 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 01:19:03,290 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:19:03,293 INFO L263 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 63 conjunts are in the unsatisfiable core [2022-11-22 01:19:03,295 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:19:03,343 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:19:03,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-22 01:19:03,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:19:04,881 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 9 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:19:04,882 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:19:06,352 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:19:06,437 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 16 proven. 33 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:19:06,437 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1131353450] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:19:06,437 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1060844951] [2022-11-22 01:19:06,439 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:19:06,439 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:19:06,439 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:19:06,439 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:19:06,439 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:19:06,478 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:19:06,483 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:19:06,484 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:19:06,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:06,598 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:06,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:06,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:19:06,714 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:06,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:06,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:19:06,835 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:19:06,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:19:06,962 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:19:06,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:19:07,078 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:19:07,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:19:07,171 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:19:07,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:19:07,214 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:19:11,476 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29203#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:19:11,476 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:19:11,477 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:19:11,477 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 56 [2022-11-22 01:19:11,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [90009237] [2022-11-22 01:19:11,477 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:19:11,477 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2022-11-22 01:19:11,477 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:19:11,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2022-11-22 01:19:11,478 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=438, Invalid=4818, Unknown=0, NotChecked=0, Total=5256 [2022-11-22 01:19:11,478 INFO L87 Difference]: Start difference. First operand 641 states and 726 transitions. Second operand has 58 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:24,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:19:24,422 INFO L93 Difference]: Finished difference Result 990 states and 1083 transitions. [2022-11-22 01:19:24,422 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-11-22 01:19:24,422 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-22 01:19:24,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:19:24,424 INFO L225 Difference]: With dead ends: 990 [2022-11-22 01:19:24,424 INFO L226 Difference]: Without dead ends: 960 [2022-11-22 01:19:24,424 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 71 SyntacticMatches, 0 SemanticMatches, 134 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4544 ImplicationChecksByTransitivity, 18.4s TimeCoverageRelationStatistics Valid=3186, Invalid=15174, Unknown=0, NotChecked=0, Total=18360 [2022-11-22 01:19:24,425 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 1214 mSDsluCounter, 212 mSDsCounter, 0 mSdLazyCounter, 1519 mSolverCounterSat, 116 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1214 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 1635 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 116 IncrementalHoareTripleChecker+Valid, 1519 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:19:24,425 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1214 Valid, 226 Invalid, 1635 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [116 Valid, 1519 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-22 01:19:24,426 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 960 states. [2022-11-22 01:19:24,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 960 to 624. [2022-11-22 01:19:24,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 624 states, 620 states have (on average 1.1451612903225807) internal successors, (710), 623 states have internal predecessors, (710), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:24,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 624 states to 624 states and 710 transitions. [2022-11-22 01:19:24,435 INFO L78 Accepts]: Start accepts. Automaton has 624 states and 710 transitions. Word has length 42 [2022-11-22 01:19:24,435 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:19:24,435 INFO L495 AbstractCegarLoop]: Abstraction has 624 states and 710 transitions. [2022-11-22 01:19:24,435 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:24,435 INFO L276 IsEmpty]: Start isEmpty. Operand 624 states and 710 transitions. [2022-11-22 01:19:24,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-22 01:19:24,436 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:19:24,437 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:19:24,449 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-22 01:19:24,643 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:19:24,643 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:19:24,643 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:19:24,643 INFO L85 PathProgramCache]: Analyzing trace with hash -1017749627, now seen corresponding path program 8 times [2022-11-22 01:19:24,643 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:19:24,643 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2096435612] [2022-11-22 01:19:24,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:19:24,644 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:19:24,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:19:26,019 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 16 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:19:26,019 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:19:26,019 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2096435612] [2022-11-22 01:19:26,020 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2096435612] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:19:26,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [315258239] [2022-11-22 01:19:26,020 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:19:26,020 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:19:26,020 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:19:26,021 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:19:26,023 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-22 01:19:26,308 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 01:19:26,308 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:19:26,311 INFO L263 TraceCheckSpWp]: Trace formula consists of 324 conjuncts, 108 conjunts are in the unsatisfiable core [2022-11-22 01:19:26,314 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:19:26,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:19:26,759 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:19:26,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:19:26,987 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:19:27,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:19:27,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 01:19:27,253 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 12 proven. 48 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:19:27,253 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:19:27,343 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1265 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1265) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 1)) 0)) is different from false [2022-11-22 01:19:27,357 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1265 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1265) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~s2#1.offset|)) 0)) is different from false [2022-11-22 01:19:27,371 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1265 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1265) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 3)) 0)) is different from false [2022-11-22 01:19:27,383 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:19:27,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:19:27,389 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:19:27,389 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:19:27,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:19:27,723 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 12 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 27 not checked. [2022-11-22 01:19:27,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [315258239] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:19:27,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [106704842] [2022-11-22 01:19:27,724 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:19:27,724 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:19:27,724 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:19:27,725 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:19:27,725 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:19:27,760 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:19:27,762 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:19:27,763 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:19:27,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:19:27,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:27,861 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:27,906 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:27,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:27,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:28,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:19:28,065 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:19:28,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:19:28,179 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:19:28,183 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:19:28,236 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-22 01:19:28,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-22 01:19:28,341 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:19:28,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:19:28,417 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:19:28,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:19:28,466 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:19:31,674 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '31262#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:19:31,674 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:19:31,675 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:19:31,675 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 23, 17] total 52 [2022-11-22 01:19:31,675 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1333193724] [2022-11-22 01:19:31,675 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:19:31,675 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-11-22 01:19:31,675 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:19:31,676 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-11-22 01:19:31,676 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=253, Invalid=3654, Unknown=11, NotChecked=372, Total=4290 [2022-11-22 01:19:31,676 INFO L87 Difference]: Start difference. First operand 624 states and 710 transitions. Second operand has 52 states, 52 states have (on average 2.0961538461538463) internal successors, (109), 52 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:37,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:19:37,721 INFO L93 Difference]: Finished difference Result 1250 states and 1362 transitions. [2022-11-22 01:19:37,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 74 states. [2022-11-22 01:19:37,722 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 52 states have (on average 2.0961538461538463) internal successors, (109), 52 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-22 01:19:37,722 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:19:37,723 INFO L225 Difference]: With dead ends: 1250 [2022-11-22 01:19:37,723 INFO L226 Difference]: Without dead ends: 891 [2022-11-22 01:19:37,724 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 223 GetRequests, 94 SyntacticMatches, 1 SemanticMatches, 128 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 4420 ImplicationChecksByTransitivity, 9.3s TimeCoverageRelationStatistics Valid=1185, Invalid=14815, Unknown=14, NotChecked=756, Total=16770 [2022-11-22 01:19:37,725 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 437 mSDsluCounter, 947 mSDsCounter, 0 mSdLazyCounter, 2219 mSolverCounterSat, 61 mSolverCounterUnsat, 21 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 437 SdHoareTripleChecker+Valid, 989 SdHoareTripleChecker+Invalid, 2750 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 2219 IncrementalHoareTripleChecker+Invalid, 21 IncrementalHoareTripleChecker+Unknown, 449 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:19:37,725 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [437 Valid, 989 Invalid, 2750 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 2219 Invalid, 21 Unknown, 449 Unchecked, 1.4s Time] [2022-11-22 01:19:37,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 891 states. [2022-11-22 01:19:37,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 891 to 757. [2022-11-22 01:19:37,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 757 states, 753 states have (on average 1.1367861885790174) internal successors, (856), 756 states have internal predecessors, (856), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:37,736 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 757 states to 757 states and 856 transitions. [2022-11-22 01:19:37,736 INFO L78 Accepts]: Start accepts. Automaton has 757 states and 856 transitions. Word has length 43 [2022-11-22 01:19:37,736 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:19:37,736 INFO L495 AbstractCegarLoop]: Abstraction has 757 states and 856 transitions. [2022-11-22 01:19:37,737 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 52 states have (on average 2.0961538461538463) internal successors, (109), 52 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:37,737 INFO L276 IsEmpty]: Start isEmpty. Operand 757 states and 856 transitions. [2022-11-22 01:19:37,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-22 01:19:37,738 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:19:37,738 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:19:37,747 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-22 01:19:37,944 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable42,29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:19:37,945 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:19:37,945 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:19:37,945 INFO L85 PathProgramCache]: Analyzing trace with hash 1530462791, now seen corresponding path program 10 times [2022-11-22 01:19:37,945 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:19:37,945 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1292823184] [2022-11-22 01:19:37,946 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:19:37,946 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:19:37,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:19:39,252 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 49 proven. 132 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:19:39,252 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:19:39,252 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1292823184] [2022-11-22 01:19:39,252 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1292823184] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:19:39,252 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1623727187] [2022-11-22 01:19:39,252 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:19:39,252 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:19:39,252 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:19:39,253 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:19:39,255 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-22 01:19:39,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:19:39,441 INFO L263 TraceCheckSpWp]: Trace formula consists of 327 conjuncts, 87 conjunts are in the unsatisfiable core [2022-11-22 01:19:39,443 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:19:39,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:19:39,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:19:40,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:19:41,103 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-22 01:19:41,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-22 01:19:41,157 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 10 proven. 171 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:19:41,157 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:19:41,958 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:19:41,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-22 01:19:41,964 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:19:41,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-22 01:19:42,278 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 10 proven. 171 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:19:42,278 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1623727187] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:19:42,278 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [104628831] [2022-11-22 01:19:42,280 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:19:42,280 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:19:42,280 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:19:42,280 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:19:42,280 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:19:42,314 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:19:42,317 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:19:42,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:19:42,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:42,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:42,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:19:42,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:19:42,515 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:19:42,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:19:42,594 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:19:45,273 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '33742#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:19:45,273 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:19:45,273 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:19:45,273 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 26, 26] total 62 [2022-11-22 01:19:45,274 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1923143578] [2022-11-22 01:19:45,274 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:19:45,274 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-22 01:19:45,274 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:19:45,275 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-22 01:19:45,275 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=218, Invalid=4736, Unknown=16, NotChecked=0, Total=4970 [2022-11-22 01:19:45,275 INFO L87 Difference]: Start difference. First operand 757 states and 856 transitions. Second operand has 62 states, 62 states have (on average 1.8387096774193548) internal successors, (114), 62 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:58,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:19:58,265 INFO L93 Difference]: Finished difference Result 2249 states and 2459 transitions. [2022-11-22 01:19:58,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 60 states. [2022-11-22 01:19:58,266 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 62 states have (on average 1.8387096774193548) internal successors, (114), 62 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-22 01:19:58,266 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:19:58,271 INFO L225 Difference]: With dead ends: 2249 [2022-11-22 01:19:58,272 INFO L226 Difference]: Without dead ends: 2155 [2022-11-22 01:19:58,273 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 213 GetRequests, 85 SyntacticMatches, 2 SemanticMatches, 126 ConstructedPredicates, 0 IntricatePredicates, 10 DeprecatedPredicates, 3458 ImplicationChecksByTransitivity, 14.3s TimeCoverageRelationStatistics Valid=1282, Invalid=14958, Unknown=16, NotChecked=0, Total=16256 [2022-11-22 01:19:58,273 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 2500 mSDsluCounter, 2722 mSDsCounter, 0 mSdLazyCounter, 6341 mSolverCounterSat, 75 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2500 SdHoareTripleChecker+Valid, 2803 SdHoareTripleChecker+Invalid, 6416 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 75 IncrementalHoareTripleChecker+Valid, 6341 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:19:58,273 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2500 Valid, 2803 Invalid, 6416 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [75 Valid, 6341 Invalid, 0 Unknown, 0 Unchecked, 4.3s Time] [2022-11-22 01:19:58,275 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2155 states. [2022-11-22 01:19:58,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2155 to 846. [2022-11-22 01:19:58,289 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 846 states, 842 states have (on average 1.1377672209026128) internal successors, (958), 845 states have internal predecessors, (958), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:58,290 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 846 states to 846 states and 958 transitions. [2022-11-22 01:19:58,291 INFO L78 Accepts]: Start accepts. Automaton has 846 states and 958 transitions. Word has length 45 [2022-11-22 01:19:58,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:19:58,291 INFO L495 AbstractCegarLoop]: Abstraction has 846 states and 958 transitions. [2022-11-22 01:19:58,291 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 62 states have (on average 1.8387096774193548) internal successors, (114), 62 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:19:58,291 INFO L276 IsEmpty]: Start isEmpty. Operand 846 states and 958 transitions. [2022-11-22 01:19:58,292 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-22 01:19:58,293 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:19:58,293 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:19:58,306 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-22 01:19:58,498 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-11-22 01:19:58,499 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:19:58,499 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:19:58,499 INFO L85 PathProgramCache]: Analyzing trace with hash 1691470169, now seen corresponding path program 3 times [2022-11-22 01:19:58,499 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:19:58,499 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [510305026] [2022-11-22 01:19:58,499 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:19:58,499 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:19:58,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:19:59,580 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 10 proven. 38 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:19:59,581 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:19:59,581 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [510305026] [2022-11-22 01:19:59,581 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [510305026] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:19:59,581 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [108161738] [2022-11-22 01:19:59,581 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:19:59,581 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:19:59,581 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:19:59,582 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:19:59,584 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-22 01:19:59,804 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:19:59,804 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:19:59,807 INFO L263 TraceCheckSpWp]: Trace formula consists of 331 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-22 01:19:59,810 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:19:59,877 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-22 01:19:59,878 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 01:19:59,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:20:01,684 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 4 proven. 44 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:20:01,685 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:20:03,274 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:20:03,369 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:20:03,369 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [108161738] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:20:03,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [888831466] [2022-11-22 01:20:03,370 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:20:03,370 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:20:03,370 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:20:03,371 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:20:03,371 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:20:03,413 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:20:03,418 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:20:03,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:20:03,457 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:03,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:03,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:03,591 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:20:03,626 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:03,648 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:03,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:20:03,743 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:20:03,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:20:03,917 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:20:03,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:20:04,006 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:20:04,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:20:04,076 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:20:04,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:20:04,122 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:20:08,251 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '37283#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:20:08,251 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:20:08,251 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:20:08,251 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 20] total 57 [2022-11-22 01:20:08,252 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [535729934] [2022-11-22 01:20:08,252 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:20:08,252 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2022-11-22 01:20:08,252 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:20:08,253 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2022-11-22 01:20:08,253 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=570, Invalid=4832, Unknown=0, NotChecked=0, Total=5402 [2022-11-22 01:20:08,253 INFO L87 Difference]: Start difference. First operand 846 states and 958 transitions. Second operand has 59 states, 58 states have (on average 2.1206896551724137) internal successors, (123), 58 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:20:13,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:20:13,934 INFO L93 Difference]: Finished difference Result 1176 states and 1295 transitions. [2022-11-22 01:20:13,934 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-11-22 01:20:13,935 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 58 states have (on average 2.1206896551724137) internal successors, (123), 58 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-22 01:20:13,935 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:20:13,939 INFO L225 Difference]: With dead ends: 1176 [2022-11-22 01:20:13,939 INFO L226 Difference]: Without dead ends: 1147 [2022-11-22 01:20:13,940 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 77 SyntacticMatches, 2 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3340 ImplicationChecksByTransitivity, 11.7s TimeCoverageRelationStatistics Valid=1864, Invalid=10126, Unknown=0, NotChecked=0, Total=11990 [2022-11-22 01:20:13,940 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 654 mSDsluCounter, 90 mSDsCounter, 0 mSdLazyCounter, 952 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 654 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 1033 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 952 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-22 01:20:13,941 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [654 Valid, 96 Invalid, 1033 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 952 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-22 01:20:13,942 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1147 states. [2022-11-22 01:20:13,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1147 to 797. [2022-11-22 01:20:13,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 797 states, 793 states have (on average 1.1437578814627996) internal successors, (907), 796 states have internal predecessors, (907), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:20:13,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 797 states to 797 states and 907 transitions. [2022-11-22 01:20:13,952 INFO L78 Accepts]: Start accepts. Automaton has 797 states and 907 transitions. Word has length 45 [2022-11-22 01:20:13,953 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:20:13,953 INFO L495 AbstractCegarLoop]: Abstraction has 797 states and 907 transitions. [2022-11-22 01:20:13,953 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 58 states have (on average 2.1206896551724137) internal successors, (123), 58 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:20:13,953 INFO L276 IsEmpty]: Start isEmpty. Operand 797 states and 907 transitions. [2022-11-22 01:20:13,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-22 01:20:13,954 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:20:13,955 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:20:13,967 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-22 01:20:14,163 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-11-22 01:20:14,163 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:20:14,163 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:20:14,163 INFO L85 PathProgramCache]: Analyzing trace with hash 1203531109, now seen corresponding path program 4 times [2022-11-22 01:20:14,163 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:20:14,163 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1411141194] [2022-11-22 01:20:14,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:20:14,164 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:20:14,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:20:15,225 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 4 proven. 62 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:20:15,225 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:20:15,225 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1411141194] [2022-11-22 01:20:15,225 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1411141194] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:20:15,225 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1708149046] [2022-11-22 01:20:15,225 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:20:15,225 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:20:15,225 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:20:15,227 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:20:15,253 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-22 01:20:15,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:20:15,449 INFO L263 TraceCheckSpWp]: Trace formula consists of 321 conjuncts, 79 conjunts are in the unsatisfiable core [2022-11-22 01:20:15,451 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:20:15,465 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:20:15,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:20:15,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:20:16,663 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 0 proven. 66 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:20:16,663 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:20:18,179 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 0 proven. 66 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:20:18,179 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1708149046] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:20:18,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1361813972] [2022-11-22 01:20:18,180 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 01:20:18,180 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:20:18,181 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:20:18,181 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:20:18,181 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:20:18,221 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:20:18,223 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:20:18,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:20:18,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:18,313 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:18,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:18,386 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:18,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:18,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:18,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:20:18,538 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:20:18,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:20:18,677 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:20:18,677 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:20:18,802 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:20:18,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:20:18,876 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:20:18,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:20:18,950 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:20:22,855 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '39673#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:20:22,855 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:20:22,858 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:20:22,859 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 20, 20] total 59 [2022-11-22 01:20:22,859 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [827310646] [2022-11-22 01:20:22,859 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:20:22,859 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 60 states [2022-11-22 01:20:22,860 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:20:22,860 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 60 interpolants. [2022-11-22 01:20:22,860 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=304, Invalid=5098, Unknown=0, NotChecked=0, Total=5402 [2022-11-22 01:20:22,861 INFO L87 Difference]: Start difference. First operand 797 states and 907 transitions. Second operand has 60 states, 59 states have (on average 2.2033898305084745) internal successors, (130), 60 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:20:56,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:20:56,856 INFO L93 Difference]: Finished difference Result 2809 states and 3098 transitions. [2022-11-22 01:20:56,857 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 191 states. [2022-11-22 01:20:56,857 INFO L78 Accepts]: Start accepts. Automaton has has 60 states, 59 states have (on average 2.2033898305084745) internal successors, (130), 60 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2022-11-22 01:20:56,857 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:20:56,864 INFO L225 Difference]: With dead ends: 2809 [2022-11-22 01:20:56,864 INFO L226 Difference]: Without dead ends: 2779 [2022-11-22 01:20:56,866 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 341 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 256 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21723 ImplicationChecksByTransitivity, 37.9s TimeCoverageRelationStatistics Valid=8479, Invalid=57827, Unknown=0, NotChecked=0, Total=66306 [2022-11-22 01:20:56,867 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 3787 mSDsluCounter, 666 mSDsCounter, 0 mSdLazyCounter, 3346 mSolverCounterSat, 162 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3787 SdHoareTripleChecker+Valid, 689 SdHoareTripleChecker+Invalid, 3508 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 162 IncrementalHoareTripleChecker+Valid, 3346 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:20:56,867 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3787 Valid, 689 Invalid, 3508 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [162 Valid, 3346 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-11-22 01:20:56,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2779 states. [2022-11-22 01:20:56,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2779 to 782. [2022-11-22 01:20:56,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 782 states, 778 states have (on average 1.1426735218508997) internal successors, (889), 781 states have internal predecessors, (889), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:20:56,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 782 states to 782 states and 889 transitions. [2022-11-22 01:20:56,886 INFO L78 Accepts]: Start accepts. Automaton has 782 states and 889 transitions. Word has length 46 [2022-11-22 01:20:56,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:20:56,886 INFO L495 AbstractCegarLoop]: Abstraction has 782 states and 889 transitions. [2022-11-22 01:20:56,886 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 60 states, 59 states have (on average 2.2033898305084745) internal successors, (130), 60 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:20:56,886 INFO L276 IsEmpty]: Start isEmpty. Operand 782 states and 889 transitions. [2022-11-22 01:20:56,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-22 01:20:56,888 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:20:56,888 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:20:56,899 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-22 01:20:57,099 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-11-22 01:20:57,099 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:20:57,099 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:20:57,099 INFO L85 PathProgramCache]: Analyzing trace with hash -1338966320, now seen corresponding path program 9 times [2022-11-22 01:20:57,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:20:57,099 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [954109274] [2022-11-22 01:20:57,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:20:57,100 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:20:57,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:20:57,481 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 4 proven. 54 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:20:57,481 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:20:57,481 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [954109274] [2022-11-22 01:20:57,481 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [954109274] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:20:57,481 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [446249678] [2022-11-22 01:20:57,481 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:20:57,481 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:20:57,482 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:20:57,482 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:20:57,484 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-22 01:20:57,791 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:20:57,791 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:20:57,794 INFO L263 TraceCheckSpWp]: Trace formula consists of 350 conjuncts, 52 conjunts are in the unsatisfiable core [2022-11-22 01:20:57,795 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:20:57,805 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:20:57,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:20:57,983 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 9 proven. 49 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:20:57,983 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:20:58,367 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 9 proven. 49 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:20:58,367 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [446249678] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:20:58,367 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1232826960] [2022-11-22 01:20:58,368 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:20:58,368 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:20:58,369 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:20:58,369 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:20:58,369 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:20:58,398 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:20:58,400 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:20:58,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:20:58,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:20:58,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:58,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:58,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:20:58,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:58,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:20:58,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:20:58,723 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:20:58,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:20:58,831 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:20:58,835 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:20:58,887 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-22 01:20:58,887 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-22 01:20:59,036 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:20:59,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:20:59,114 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:20:59,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:20:59,146 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:21:01,932 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '43956#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:21:01,932 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:21:01,932 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:21:01,932 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 13, 13] total 33 [2022-11-22 01:21:01,932 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [422465686] [2022-11-22 01:21:01,932 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:21:01,933 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-22 01:21:01,933 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:21:01,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-22 01:21:01,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=249, Invalid=2007, Unknown=0, NotChecked=0, Total=2256 [2022-11-22 01:21:01,933 INFO L87 Difference]: Start difference. First operand 782 states and 889 transitions. Second operand has 34 states, 33 states have (on average 2.9696969696969697) internal successors, (98), 34 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:21:02,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:21:02,901 INFO L93 Difference]: Finished difference Result 916 states and 1012 transitions. [2022-11-22 01:21:02,902 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-22 01:21:02,902 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 33 states have (on average 2.9696969696969697) internal successors, (98), 34 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-22 01:21:02,902 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:21:02,904 INFO L225 Difference]: With dead ends: 916 [2022-11-22 01:21:02,905 INFO L226 Difference]: Without dead ends: 916 [2022-11-22 01:21:02,905 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 107 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1084 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=650, Invalid=3772, Unknown=0, NotChecked=0, Total=4422 [2022-11-22 01:21:02,906 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 502 mSDsluCounter, 319 mSDsCounter, 0 mSdLazyCounter, 796 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 502 SdHoareTripleChecker+Valid, 351 SdHoareTripleChecker+Invalid, 812 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 796 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 01:21:02,906 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [502 Valid, 351 Invalid, 812 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 796 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-22 01:21:02,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 916 states. [2022-11-22 01:21:02,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 916 to 834. [2022-11-22 01:21:02,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 834 states, 830 states have (on average 1.1349397590361445) internal successors, (942), 833 states have internal predecessors, (942), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:21:02,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 834 states to 834 states and 942 transitions. [2022-11-22 01:21:02,921 INFO L78 Accepts]: Start accepts. Automaton has 834 states and 942 transitions. Word has length 47 [2022-11-22 01:21:02,921 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:21:02,922 INFO L495 AbstractCegarLoop]: Abstraction has 834 states and 942 transitions. [2022-11-22 01:21:02,922 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 33 states have (on average 2.9696969696969697) internal successors, (98), 34 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:21:02,922 INFO L276 IsEmpty]: Start isEmpty. Operand 834 states and 942 transitions. [2022-11-22 01:21:02,923 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-22 01:21:02,924 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:21:02,924 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:21:02,930 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Ended with exit code 0 [2022-11-22 01:21:03,130 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-11-22 01:21:03,130 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:21:03,131 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:21:03,131 INFO L85 PathProgramCache]: Analyzing trace with hash -1364447405, now seen corresponding path program 4 times [2022-11-22 01:21:03,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:21:03,131 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [279418204] [2022-11-22 01:21:03,131 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:21:03,131 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:21:03,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:21:03,286 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 11 proven. 14 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-11-22 01:21:03,287 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:21:03,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [279418204] [2022-11-22 01:21:03,287 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [279418204] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:21:03,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1870484063] [2022-11-22 01:21:03,287 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:21:03,287 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:21:03,287 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:21:03,288 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:21:03,290 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-22 01:21:03,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:21:03,480 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-22 01:21:03,482 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:21:03,611 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 9 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-11-22 01:21:03,611 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:21:03,748 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 9 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-11-22 01:21:03,748 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1870484063] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:21:03,748 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [646388143] [2022-11-22 01:21:03,750 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:21:03,750 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:21:03,750 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:21:03,750 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:21:03,750 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:21:03,786 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:21:03,790 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:21:03,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:21:03,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:21:03,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:21:03,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:21:03,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:21:03,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:21:04,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:21:04,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:21:04,094 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:21:04,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:21:04,223 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:21:04,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:21:04,310 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:21:04,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:21:04,379 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:21:04,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:21:04,432 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:21:07,337 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '46063#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:21:07,338 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:21:07,338 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:21:07,338 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 23 [2022-11-22 01:21:07,338 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [928758705] [2022-11-22 01:21:07,338 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:21:07,338 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-22 01:21:07,338 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:21:07,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-22 01:21:07,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=212, Invalid=1194, Unknown=0, NotChecked=0, Total=1406 [2022-11-22 01:21:07,339 INFO L87 Difference]: Start difference. First operand 834 states and 942 transitions. Second operand has 23 states, 23 states have (on average 2.347826086956522) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:21:07,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:21:07,480 INFO L93 Difference]: Finished difference Result 807 states and 912 transitions. [2022-11-22 01:21:07,480 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-22 01:21:07,481 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.347826086956522) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 48 [2022-11-22 01:21:07,481 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:21:07,483 INFO L225 Difference]: With dead ends: 807 [2022-11-22 01:21:07,483 INFO L226 Difference]: Without dead ends: 800 [2022-11-22 01:21:07,483 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 113 SyntacticMatches, 3 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 713 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=268, Invalid=1454, Unknown=0, NotChecked=0, Total=1722 [2022-11-22 01:21:07,484 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 65 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:21:07,484 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 68 Invalid, 112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:21:07,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 800 states. [2022-11-22 01:21:07,490 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 800 to 800. [2022-11-22 01:21:07,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 800 states, 796 states have (on average 1.1369346733668342) internal successors, (905), 799 states have internal predecessors, (905), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:21:07,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 800 states to 800 states and 905 transitions. [2022-11-22 01:21:07,492 INFO L78 Accepts]: Start accepts. Automaton has 800 states and 905 transitions. Word has length 48 [2022-11-22 01:21:07,492 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:21:07,492 INFO L495 AbstractCegarLoop]: Abstraction has 800 states and 905 transitions. [2022-11-22 01:21:07,493 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.347826086956522) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:21:07,493 INFO L276 IsEmpty]: Start isEmpty. Operand 800 states and 905 transitions. [2022-11-22 01:21:07,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-22 01:21:07,494 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:21:07,494 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 10, 10, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:21:07,501 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-22 01:21:07,700 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-11-22 01:21:07,700 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:21:07,701 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:21:07,701 INFO L85 PathProgramCache]: Analyzing trace with hash -1828603653, now seen corresponding path program 11 times [2022-11-22 01:21:07,701 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:21:07,701 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [156778238] [2022-11-22 01:21:07,701 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:21:07,701 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:21:07,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:21:09,459 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 64 proven. 157 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:21:09,459 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:21:09,459 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [156778238] [2022-11-22 01:21:09,459 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [156778238] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:21:09,459 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1807132113] [2022-11-22 01:21:09,459 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:21:09,459 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:21:09,460 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:21:09,460 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:21:09,463 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-22 01:21:09,801 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 12 check-sat command(s) [2022-11-22 01:21:09,801 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:21:09,804 INFO L263 TraceCheckSpWp]: Trace formula consists of 351 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-22 01:21:09,807 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:21:09,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:21:10,262 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:21:10,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:21:54,162 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:21:54,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:21:54,322 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 81 proven. 140 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:21:54,322 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:21:56,241 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:21:56,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 25 [2022-11-22 01:21:56,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-22 01:21:56,256 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:21:56,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 36 treesize of output 35 [2022-11-22 01:21:56,262 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 7 [2022-11-22 01:21:57,174 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 81 proven. 140 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:21:57,174 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1807132113] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:21:57,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1781111182] [2022-11-22 01:21:57,175 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:21:57,176 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:21:57,176 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:21:57,176 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:21:57,176 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:21:57,204 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:21:57,207 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:21:57,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:21:57,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:21:57,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:21:57,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:21:57,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:21:57,414 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:21:57,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:21:57,524 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:22:00,366 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '48058#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:22:00,366 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:22:00,366 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:22:00,366 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 26, 26] total 76 [2022-11-22 01:22:00,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [961568542] [2022-11-22 01:22:00,367 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:22:00,367 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 77 states [2022-11-22 01:22:00,367 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:22:00,367 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 77 interpolants. [2022-11-22 01:22:00,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=659, Invalid=6644, Unknown=7, NotChecked=0, Total=7310 [2022-11-22 01:22:00,368 INFO L87 Difference]: Start difference. First operand 800 states and 905 transitions. Second operand has 77 states, 76 states have (on average 1.9210526315789473) internal successors, (146), 77 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:22:05,836 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:22:18,894 WARN L233 SmtUtils]: Spent 5.94s on a formula simplification. DAG size of input: 81 DAG size of output: 66 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-22 01:22:23,274 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:22:26,006 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:22:32,673 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:22:34,698 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:22:38,062 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:22:40,707 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:22:46,881 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:00,292 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:08,198 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:16,578 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:18,591 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:20,600 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:22,487 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.55s for a HTC check with result VALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:24,501 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:34,931 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:36,902 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.97s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:41,567 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:52,158 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:23:59,529 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:24:01,673 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:24:14,109 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:24:15,345 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.14s for a HTC check with result VALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:24:17,479 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:24:31,915 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:24:36,984 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:24:41,819 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:24:43,827 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:24:47,134 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:25:00,625 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:25:13,744 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:25:17,265 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:25:28,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:25:28,754 INFO L93 Difference]: Finished difference Result 2096 states and 2292 transitions. [2022-11-22 01:25:28,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 67 states. [2022-11-22 01:25:28,755 INFO L78 Accepts]: Start accepts. Automaton has has 77 states, 76 states have (on average 1.9210526315789473) internal successors, (146), 77 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-22 01:25:28,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:25:28,760 INFO L225 Difference]: With dead ends: 2096 [2022-11-22 01:25:28,760 INFO L226 Difference]: Without dead ends: 2062 [2022-11-22 01:25:28,761 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 86 SyntacticMatches, 6 SemanticMatches, 148 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4561 ImplicationChecksByTransitivity, 181.9s TimeCoverageRelationStatistics Valid=4449, Invalid=17875, Unknown=26, NotChecked=0, Total=22350 [2022-11-22 01:25:28,761 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 1898 mSDsluCounter, 1111 mSDsCounter, 0 mSdLazyCounter, 2736 mSolverCounterSat, 252 mSolverCounterUnsat, 34 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 76.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1898 SdHoareTripleChecker+Valid, 1185 SdHoareTripleChecker+Invalid, 3022 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 252 IncrementalHoareTripleChecker+Valid, 2736 IncrementalHoareTripleChecker+Invalid, 34 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 76.5s IncrementalHoareTripleChecker+Time [2022-11-22 01:25:28,761 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1898 Valid, 1185 Invalid, 3022 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [252 Valid, 2736 Invalid, 34 Unknown, 0 Unchecked, 76.5s Time] [2022-11-22 01:25:28,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2062 states. [2022-11-22 01:25:28,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2062 to 866. [2022-11-22 01:25:28,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 866 states, 862 states have (on average 1.1299303944315546) internal successors, (974), 865 states have internal predecessors, (974), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:25:28,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 866 states to 866 states and 974 transitions. [2022-11-22 01:25:28,776 INFO L78 Accepts]: Start accepts. Automaton has 866 states and 974 transitions. Word has length 49 [2022-11-22 01:25:28,776 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:25:28,776 INFO L495 AbstractCegarLoop]: Abstraction has 866 states and 974 transitions. [2022-11-22 01:25:28,776 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 77 states, 76 states have (on average 1.9210526315789473) internal successors, (146), 77 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:25:28,776 INFO L276 IsEmpty]: Start isEmpty. Operand 866 states and 974 transitions. [2022-11-22 01:25:28,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-22 01:25:28,783 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:25:28,783 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:25:28,794 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-22 01:25:28,989 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-22 01:25:28,990 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:25:28,990 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:25:28,990 INFO L85 PathProgramCache]: Analyzing trace with hash 1915207345, now seen corresponding path program 5 times [2022-11-22 01:25:28,990 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:25:28,990 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2079920589] [2022-11-22 01:25:28,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:25:28,991 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:25:29,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:25:30,417 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 4 proven. 85 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:25:30,417 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:25:30,417 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2079920589] [2022-11-22 01:25:30,418 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2079920589] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:25:30,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1257117718] [2022-11-22 01:25:30,418 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:25:30,418 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:25:30,418 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:25:30,419 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:25:30,441 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-22 01:25:30,846 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-22 01:25:30,846 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:25:30,850 INFO L263 TraceCheckSpWp]: Trace formula consists of 345 conjuncts, 89 conjunts are in the unsatisfiable core [2022-11-22 01:25:30,852 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:25:30,860 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:25:30,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-22 01:25:30,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:25:32,724 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 89 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:25:32,724 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:25:34,787 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 89 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:25:34,787 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1257117718] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:25:34,787 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1536823557] [2022-11-22 01:25:34,788 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 01:25:34,789 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:25:34,789 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:25:34,789 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:25:34,789 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:25:34,830 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:25:34,835 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:25:34,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:25:34,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:25:34,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:25:34,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:25:34,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:25:35,040 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:25:35,066 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:25:35,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:25:35,168 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:25:35,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:25:35,325 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:25:35,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:25:35,430 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:25:35,431 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:25:35,514 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:25:35,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:25:35,594 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:25:39,805 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '51523#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:25:39,805 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:25:39,806 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:25:39,806 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 22, 22] total 65 [2022-11-22 01:25:39,806 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [660171487] [2022-11-22 01:25:39,806 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:25:39,806 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 66 states [2022-11-22 01:25:39,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:25:39,807 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 66 interpolants. [2022-11-22 01:25:39,807 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=475, Invalid=5845, Unknown=0, NotChecked=0, Total=6320 [2022-11-22 01:25:39,807 INFO L87 Difference]: Start difference. First operand 866 states and 974 transitions. Second operand has 66 states, 65 states have (on average 2.1846153846153844) internal successors, (142), 66 states have internal predecessors, (142), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:26:58,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:26:58,975 INFO L93 Difference]: Finished difference Result 3999 states and 4393 transitions. [2022-11-22 01:26:58,975 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 352 states. [2022-11-22 01:26:58,975 INFO L78 Accepts]: Start accepts. Automaton has has 66 states, 65 states have (on average 2.1846153846153844) internal successors, (142), 66 states have internal predecessors, (142), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-22 01:26:58,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:26:58,983 INFO L225 Difference]: With dead ends: 3999 [2022-11-22 01:26:58,984 INFO L226 Difference]: Without dead ends: 3991 [2022-11-22 01:26:58,992 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 514 GetRequests, 93 SyntacticMatches, 0 SemanticMatches, 421 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 74460 ImplicationChecksByTransitivity, 82.3s TimeCoverageRelationStatistics Valid=20191, Invalid=158315, Unknown=0, NotChecked=0, Total=178506 [2022-11-22 01:26:58,992 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 3418 mSDsluCounter, 956 mSDsCounter, 0 mSdLazyCounter, 4201 mSolverCounterSat, 381 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3418 SdHoareTripleChecker+Valid, 989 SdHoareTripleChecker+Invalid, 4582 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 381 IncrementalHoareTripleChecker+Valid, 4201 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:26:58,992 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3418 Valid, 989 Invalid, 4582 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [381 Valid, 4201 Invalid, 0 Unknown, 0 Unchecked, 4.2s Time] [2022-11-22 01:26:58,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3991 states. [2022-11-22 01:26:59,008 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3991 to 926. [2022-11-22 01:26:59,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 926 states, 922 states have (on average 1.1258134490238612) internal successors, (1038), 925 states have internal predecessors, (1038), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:26:59,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 926 states to 926 states and 1038 transitions. [2022-11-22 01:26:59,010 INFO L78 Accepts]: Start accepts. Automaton has 926 states and 1038 transitions. Word has length 50 [2022-11-22 01:26:59,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:26:59,010 INFO L495 AbstractCegarLoop]: Abstraction has 926 states and 1038 transitions. [2022-11-22 01:26:59,010 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 66 states, 65 states have (on average 2.1846153846153844) internal successors, (142), 66 states have internal predecessors, (142), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:26:59,010 INFO L276 IsEmpty]: Start isEmpty. Operand 926 states and 1038 transitions. [2022-11-22 01:26:59,012 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-22 01:26:59,012 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:26:59,012 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:26:59,023 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-22 01:26:59,218 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-22 01:26:59,218 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:26:59,219 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:26:59,219 INFO L85 PathProgramCache]: Analyzing trace with hash 1915198309, now seen corresponding path program 5 times [2022-11-22 01:26:59,219 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:26:59,219 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [775050203] [2022-11-22 01:26:59,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:26:59,219 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:26:59,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:27:01,060 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 20 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:27:01,060 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:27:01,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [775050203] [2022-11-22 01:27:01,060 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [775050203] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:27:01,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1575746275] [2022-11-22 01:27:01,060 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:27:01,060 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:27:01,061 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:27:01,061 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:27:01,064 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-22 01:27:01,455 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-22 01:27:01,455 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:27:01,458 INFO L263 TraceCheckSpWp]: Trace formula consists of 358 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-22 01:27:01,461 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:27:01,528 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:27:01,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:27:01,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:27:03,493 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 25 proven. 68 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 01:27:03,493 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:27:05,765 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:27:05,855 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 38 proven. 55 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 01:27:05,855 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1575746275] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:27:05,855 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [17405288] [2022-11-22 01:27:05,856 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:27:05,856 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:27:05,856 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:27:05,857 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:27:05,857 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:27:05,906 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:27:05,910 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:27:05,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:27:05,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:06,000 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:06,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:06,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:27:06,143 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:06,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:06,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:27:06,261 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:27:06,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:27:06,392 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 01:27:06,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 01:27:06,480 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:27:06,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:27:06,557 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:27:06,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:27:06,597 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:27:11,719 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '57514#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:27:11,719 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:27:11,719 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:27:11,720 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 24, 24] total 70 [2022-11-22 01:27:11,720 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [954109247] [2022-11-22 01:27:11,720 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:27:11,720 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 72 states [2022-11-22 01:27:11,720 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:27:11,721 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 72 interpolants. [2022-11-22 01:27:11,721 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=558, Invalid=6924, Unknown=0, NotChecked=0, Total=7482 [2022-11-22 01:27:11,722 INFO L87 Difference]: Start difference. First operand 926 states and 1038 transitions. Second operand has 72 states, 71 states have (on average 2.056338028169014) internal successors, (146), 71 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:27:29,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:27:29,368 INFO L93 Difference]: Finished difference Result 1531 states and 1657 transitions. [2022-11-22 01:27:29,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 82 states. [2022-11-22 01:27:29,369 INFO L78 Accepts]: Start accepts. Automaton has has 72 states, 71 states have (on average 2.056338028169014) internal successors, (146), 71 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-22 01:27:29,369 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:27:29,372 INFO L225 Difference]: With dead ends: 1531 [2022-11-22 01:27:29,372 INFO L226 Difference]: Without dead ends: 1428 [2022-11-22 01:27:29,374 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 249 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 164 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6628 ImplicationChecksByTransitivity, 24.7s TimeCoverageRelationStatistics Valid=4998, Invalid=22392, Unknown=0, NotChecked=0, Total=27390 [2022-11-22 01:27:29,374 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 1215 mSDsluCounter, 352 mSDsCounter, 0 mSdLazyCounter, 2481 mSolverCounterSat, 136 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1215 SdHoareTripleChecker+Valid, 371 SdHoareTripleChecker+Invalid, 2617 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 136 IncrementalHoareTripleChecker+Valid, 2481 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:27:29,375 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1215 Valid, 371 Invalid, 2617 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [136 Valid, 2481 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2022-11-22 01:27:29,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1428 states. [2022-11-22 01:27:29,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1428 to 961. [2022-11-22 01:27:29,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 961 states, 957 states have (on average 1.1222570532915361) internal successors, (1074), 960 states have internal predecessors, (1074), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:27:29,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 961 states to 961 states and 1074 transitions. [2022-11-22 01:27:29,387 INFO L78 Accepts]: Start accepts. Automaton has 961 states and 1074 transitions. Word has length 50 [2022-11-22 01:27:29,387 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:27:29,387 INFO L495 AbstractCegarLoop]: Abstraction has 961 states and 1074 transitions. [2022-11-22 01:27:29,387 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 72 states, 71 states have (on average 2.056338028169014) internal successors, (146), 71 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:27:29,387 INFO L276 IsEmpty]: Start isEmpty. Operand 961 states and 1074 transitions. [2022-11-22 01:27:29,389 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-22 01:27:29,389 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:27:29,389 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 10, 10, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:27:29,394 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-11-22 01:27:29,589 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable50 [2022-11-22 01:27:29,589 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:27:29,590 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:27:29,590 INFO L85 PathProgramCache]: Analyzing trace with hash -646485868, now seen corresponding path program 12 times [2022-11-22 01:27:29,590 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:27:29,590 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1835662723] [2022-11-22 01:27:29,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:27:29,590 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:27:29,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:27:30,622 INFO L134 CoverageAnalysis]: Checked inductivity of 244 backedges. 33 proven. 210 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:27:30,623 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:27:30,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1835662723] [2022-11-22 01:27:30,623 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1835662723] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:27:30,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [140099046] [2022-11-22 01:27:30,623 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:27:30,623 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:27:30,623 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:27:30,624 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:27:30,626 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-22 01:27:31,080 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:27:31,080 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:27:31,084 INFO L263 TraceCheckSpWp]: Trace formula consists of 362 conjuncts, 102 conjunts are in the unsatisfiable core [2022-11-22 01:27:31,087 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:27:31,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:27:31,961 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:27:31,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 26 [2022-11-22 01:27:34,053 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:27:34,054 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:27:34,055 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:27:34,056 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:27:34,065 INFO L321 Elim1Store]: treesize reduction 4, result has 66.7 percent of original size [2022-11-22 01:27:34,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 38 treesize of output 21 [2022-11-22 01:27:34,074 INFO L134 CoverageAnalysis]: Checked inductivity of 244 backedges. 33 proven. 210 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:27:34,074 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:27:34,368 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:27:34,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 93 treesize of output 83 [2022-11-22 01:27:37,276 INFO L134 CoverageAnalysis]: Checked inductivity of 244 backedges. 35 proven. 208 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:27:37,276 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [140099046] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:27:37,276 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [636480805] [2022-11-22 01:27:37,277 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:27:37,277 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:27:37,277 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:27:37,277 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:27:37,277 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:27:37,307 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:27:37,310 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:27:37,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:27:37,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:27:37,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:37,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:37,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:27:37,535 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:27:37,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:27:37,612 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:27:40,259 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '60551#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:27:40,260 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:27:40,260 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:27:40,260 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 30, 30] total 72 [2022-11-22 01:27:40,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1976370258] [2022-11-22 01:27:40,260 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:27:40,261 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 72 states [2022-11-22 01:27:40,261 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:27:40,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 72 interpolants. [2022-11-22 01:27:40,262 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=238, Invalid=6242, Unknown=0, NotChecked=0, Total=6480 [2022-11-22 01:27:40,262 INFO L87 Difference]: Start difference. First operand 961 states and 1074 transitions. Second operand has 72 states, 72 states have (on average 1.7222222222222223) internal successors, (124), 72 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:27:51,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:27:51,614 INFO L93 Difference]: Finished difference Result 2221 states and 2423 transitions. [2022-11-22 01:27:51,614 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2022-11-22 01:27:51,615 INFO L78 Accepts]: Start accepts. Automaton has has 72 states, 72 states have (on average 1.7222222222222223) internal successors, (124), 72 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-22 01:27:51,615 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:27:51,617 INFO L225 Difference]: With dead ends: 2221 [2022-11-22 01:27:51,617 INFO L226 Difference]: Without dead ends: 2173 [2022-11-22 01:27:51,617 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 140 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3677 ImplicationChecksByTransitivity, 14.0s TimeCoverageRelationStatistics Valid=1078, Invalid=18944, Unknown=0, NotChecked=0, Total=20022 [2022-11-22 01:27:51,618 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 1302 mSDsluCounter, 4353 mSDsCounter, 0 mSdLazyCounter, 6123 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1302 SdHoareTripleChecker+Valid, 4466 SdHoareTripleChecker+Invalid, 6176 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 6123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.8s IncrementalHoareTripleChecker+Time [2022-11-22 01:27:51,618 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1302 Valid, 4466 Invalid, 6176 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 6123 Invalid, 0 Unknown, 0 Unchecked, 4.8s Time] [2022-11-22 01:27:51,620 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2173 states. [2022-11-22 01:27:51,632 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2173 to 998. [2022-11-22 01:27:51,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 998 states, 994 states have (on average 1.1297786720321932) internal successors, (1123), 997 states have internal predecessors, (1123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:27:51,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 998 states to 998 states and 1123 transitions. [2022-11-22 01:27:51,634 INFO L78 Accepts]: Start accepts. Automaton has 998 states and 1123 transitions. Word has length 51 [2022-11-22 01:27:51,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:27:51,634 INFO L495 AbstractCegarLoop]: Abstraction has 998 states and 1123 transitions. [2022-11-22 01:27:51,634 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 72 states, 72 states have (on average 1.7222222222222223) internal successors, (124), 72 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:27:51,635 INFO L276 IsEmpty]: Start isEmpty. Operand 998 states and 1123 transitions. [2022-11-22 01:27:51,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-22 01:27:51,636 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:27:51,636 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:27:51,647 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Ended with exit code 0 [2022-11-22 01:27:51,843 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable51,38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:27:51,843 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:27:51,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:27:51,843 INFO L85 PathProgramCache]: Analyzing trace with hash -1010377592, now seen corresponding path program 10 times [2022-11-22 01:27:51,844 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:27:51,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [542916256] [2022-11-22 01:27:51,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:27:51,844 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:27:51,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:27:53,615 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 24 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:27:53,615 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:27:53,615 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [542916256] [2022-11-22 01:27:53,615 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [542916256] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:27:53,615 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1922906423] [2022-11-22 01:27:53,615 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:27:53,615 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:27:53,615 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:27:53,616 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:27:53,619 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-11-22 01:27:53,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:27:53,838 INFO L263 TraceCheckSpWp]: Trace formula consists of 382 conjuncts, 98 conjunts are in the unsatisfiable core [2022-11-22 01:27:53,847 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:27:53,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:27:54,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:27:54,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:27:54,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:27:54,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:27:54,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:27:54,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 01:27:54,983 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 24 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:27:54,983 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:27:55,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 01:27:55,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 01:27:56,393 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 31 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:27:56,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1922906423] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:27:56,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1688747230] [2022-11-22 01:27:56,394 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:27:56,394 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:27:56,394 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:27:56,395 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:27:56,395 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:27:56,429 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:27:56,434 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:27:56,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:27:56,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:56,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:56,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:56,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:27:56,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:56,664 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:27:56,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:27:56,756 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:27:56,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:27:56,860 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:27:56,864 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:27:56,922 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-22 01:27:56,922 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-22 01:27:57,056 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:27:57,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:27:57,142 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:27:57,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:27:57,179 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:28:01,021 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '64266#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:28:01,021 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:28:01,021 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:28:01,022 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 22, 22] total 59 [2022-11-22 01:28:01,022 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [27398833] [2022-11-22 01:28:01,022 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:28:01,022 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2022-11-22 01:28:01,022 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:28:01,023 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2022-11-22 01:28:01,023 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=375, Invalid=4854, Unknown=27, NotChecked=0, Total=5256 [2022-11-22 01:28:01,023 INFO L87 Difference]: Start difference. First operand 998 states and 1123 transitions. Second operand has 59 states, 59 states have (on average 2.2711864406779663) internal successors, (134), 59 states have internal predecessors, (134), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:28:04,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:28:04,145 INFO L93 Difference]: Finished difference Result 1052 states and 1174 transitions. [2022-11-22 01:28:04,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-22 01:28:04,146 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 59 states have (on average 2.2711864406779663) internal successors, (134), 59 states have internal predecessors, (134), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-22 01:28:04,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:28:04,147 INFO L225 Difference]: With dead ends: 1052 [2022-11-22 01:28:04,147 INFO L226 Difference]: Without dead ends: 956 [2022-11-22 01:28:04,148 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 210 GetRequests, 113 SyntacticMatches, 3 SemanticMatches, 94 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2144 ImplicationChecksByTransitivity, 8.6s TimeCoverageRelationStatistics Valid=915, Invalid=8178, Unknown=27, NotChecked=0, Total=9120 [2022-11-22 01:28:04,148 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 270 mSDsluCounter, 310 mSDsCounter, 0 mSdLazyCounter, 1563 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 270 SdHoareTripleChecker+Valid, 324 SdHoareTripleChecker+Invalid, 1595 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 1563 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:28:04,148 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [270 Valid, 324 Invalid, 1595 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 1563 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-22 01:28:04,148 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 956 states. [2022-11-22 01:28:04,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 956 to 956. [2022-11-22 01:28:04,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 956 states, 952 states have (on average 1.129201680672269) internal successors, (1075), 955 states have internal predecessors, (1075), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:28:04,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 956 states to 956 states and 1075 transitions. [2022-11-22 01:28:04,158 INFO L78 Accepts]: Start accepts. Automaton has 956 states and 1075 transitions. Word has length 52 [2022-11-22 01:28:04,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:28:04,158 INFO L495 AbstractCegarLoop]: Abstraction has 956 states and 1075 transitions. [2022-11-22 01:28:04,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 59 states have (on average 2.2711864406779663) internal successors, (134), 59 states have internal predecessors, (134), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:28:04,158 INFO L276 IsEmpty]: Start isEmpty. Operand 956 states and 1075 transitions. [2022-11-22 01:28:04,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-22 01:28:04,160 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:28:04,160 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 11, 11, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:28:04,171 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Ended with exit code 0 [2022-11-22 01:28:04,365 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable52,39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:28:04,366 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 01:28:04,366 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:28:04,366 INFO L85 PathProgramCache]: Analyzing trace with hash 1288637743, now seen corresponding path program 13 times [2022-11-22 01:28:04,366 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:28:04,366 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [102363622] [2022-11-22 01:28:04,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:28:04,366 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:28:04,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:28:06,495 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 81 proven. 184 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:28:06,495 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:28:06,496 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [102363622] [2022-11-22 01:28:06,496 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [102363622] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:28:06,496 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1108638274] [2022-11-22 01:28:06,496 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:28:06,496 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:28:06,496 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:28:06,497 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:28:06,499 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99682cf4-72ac-49cc-b82d-0a64bafbcdab/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-11-22 01:28:06,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:28:06,727 INFO L263 TraceCheckSpWp]: Trace formula consists of 375 conjuncts, 99 conjunts are in the unsatisfiable core [2022-11-22 01:28:06,730 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:28:06,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:28:07,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:28:07,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22