./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8688e0efa9d37c2205606fbd307da42d83b0f0e2936dd15336b8b67e136d86b0 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-22 02:47:30,084 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-22 02:47:30,086 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-22 02:47:30,114 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-22 02:47:30,115 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-22 02:47:30,116 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-22 02:47:30,118 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-22 02:47:30,120 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-22 02:47:30,123 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-22 02:47:30,127 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-22 02:47:30,128 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-22 02:47:30,130 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-22 02:47:30,130 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-22 02:47:30,132 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-22 02:47:30,134 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-22 02:47:30,135 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-22 02:47:30,137 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-22 02:47:30,138 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-22 02:47:30,147 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-22 02:47:30,157 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-22 02:47:30,163 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-22 02:47:30,168 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-22 02:47:30,169 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-22 02:47:30,171 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-22 02:47:30,183 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-22 02:47:30,184 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-22 02:47:30,184 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-22 02:47:30,185 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-22 02:47:30,186 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-22 02:47:30,187 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-22 02:47:30,188 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-22 02:47:30,189 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-22 02:47:30,190 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-22 02:47:30,191 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-22 02:47:30,192 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-22 02:47:30,193 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-22 02:47:30,193 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-22 02:47:30,194 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-22 02:47:30,194 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-22 02:47:30,203 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-22 02:47:30,205 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-22 02:47:30,206 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-22 02:47:30,256 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-22 02:47:30,256 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-22 02:47:30,257 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-22 02:47:30,257 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-22 02:47:30,258 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-22 02:47:30,259 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-22 02:47:30,259 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-22 02:47:30,259 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-22 02:47:30,260 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-22 02:47:30,260 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-22 02:47:30,261 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-22 02:47:30,262 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-22 02:47:30,262 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-22 02:47:30,262 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-22 02:47:30,263 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-22 02:47:30,263 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-22 02:47:30,263 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-22 02:47:30,263 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-22 02:47:30,264 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-22 02:47:30,265 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-22 02:47:30,265 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-22 02:47:30,265 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-22 02:47:30,265 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-22 02:47:30,266 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-22 02:47:30,267 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-22 02:47:30,267 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-22 02:47:30,267 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-22 02:47:30,268 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-22 02:47:30,268 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-22 02:47:30,268 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-22 02:47:30,269 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-22 02:47:30,269 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-22 02:47:30,269 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-22 02:47:30,270 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-22 02:47:30,270 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-22 02:47:30,270 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 02:47:30,271 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-22 02:47:30,271 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-22 02:47:30,272 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-22 02:47:30,272 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-22 02:47:30,272 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-22 02:47:30,273 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-22 02:47:30,273 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8688e0efa9d37c2205606fbd307da42d83b0f0e2936dd15336b8b67e136d86b0 [2022-11-22 02:47:30,599 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-22 02:47:30,628 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-22 02:47:30,631 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-22 02:47:30,633 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-22 02:47:30,634 INFO L275 PluginConnector]: CDTParser initialized [2022-11-22 02:47:30,635 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/../../sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i [2022-11-22 02:47:34,015 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-22 02:47:34,415 INFO L351 CDTParser]: Found 1 translation units. [2022-11-22 02:47:34,416 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i [2022-11-22 02:47:34,430 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/data/05b75af6c/c3b60f432dd54deda5d32c3c88b2fa44/FLAG455c19e38 [2022-11-22 02:47:34,449 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/data/05b75af6c/c3b60f432dd54deda5d32c3c88b2fa44 [2022-11-22 02:47:34,452 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-22 02:47:34,454 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-22 02:47:34,456 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-22 02:47:34,456 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-22 02:47:34,463 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-22 02:47:34,464 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:34,466 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@28b74a20 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34, skipping insertion in model container [2022-11-22 02:47:34,466 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:34,476 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-22 02:47:34,523 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-22 02:47:34,900 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 02:47:34,914 INFO L203 MainTranslator]: Completed pre-run [2022-11-22 02:47:34,961 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 02:47:34,990 INFO L208 MainTranslator]: Completed translation [2022-11-22 02:47:34,991 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34 WrapperNode [2022-11-22 02:47:34,991 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-22 02:47:34,993 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-22 02:47:34,993 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-22 02:47:34,993 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-22 02:47:35,003 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:35,020 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:35,046 INFO L138 Inliner]: procedures = 117, calls = 16, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 94 [2022-11-22 02:47:35,046 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-22 02:47:35,047 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-22 02:47:35,047 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-22 02:47:35,048 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-22 02:47:35,059 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:35,059 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:35,063 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:35,064 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:35,071 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:35,077 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:35,078 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:35,080 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:35,082 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-22 02:47:35,083 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-22 02:47:35,084 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-22 02:47:35,084 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-22 02:47:35,085 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (1/1) ... [2022-11-22 02:47:35,095 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 02:47:35,115 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:47:35,135 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-22 02:47:35,171 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-22 02:47:35,205 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-22 02:47:35,206 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-22 02:47:35,206 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-22 02:47:35,206 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-22 02:47:35,206 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-22 02:47:35,206 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-22 02:47:35,344 INFO L235 CfgBuilder]: Building ICFG [2022-11-22 02:47:35,346 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-22 02:47:35,818 INFO L276 CfgBuilder]: Performing block encoding [2022-11-22 02:47:35,934 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-22 02:47:35,935 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-22 02:47:35,938 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 02:47:35 BoogieIcfgContainer [2022-11-22 02:47:35,938 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-22 02:47:35,941 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-22 02:47:35,942 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-22 02:47:35,946 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-22 02:47:35,947 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.11 02:47:34" (1/3) ... [2022-11-22 02:47:35,948 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19ec162f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 02:47:35, skipping insertion in model container [2022-11-22 02:47:35,948 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:47:34" (2/3) ... [2022-11-22 02:47:35,949 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19ec162f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 02:47:35, skipping insertion in model container [2022-11-22 02:47:35,949 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 02:47:35" (3/3) ... [2022-11-22 02:47:35,951 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrcat-alloca-2.i [2022-11-22 02:47:35,978 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-22 02:47:35,978 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 15 error locations. [2022-11-22 02:47:36,039 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-22 02:47:36,048 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3abfb3ba, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-22 02:47:36,048 INFO L358 AbstractCegarLoop]: Starting to check reachability of 15 error locations. [2022-11-22 02:47:36,054 INFO L276 IsEmpty]: Start isEmpty. Operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:36,062 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-22 02:47:36,062 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:36,063 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-22 02:47:36,064 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:36,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:36,071 INFO L85 PathProgramCache]: Analyzing trace with hash 151696, now seen corresponding path program 1 times [2022-11-22 02:47:36,084 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:36,085 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [168843453] [2022-11-22 02:47:36,085 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:36,086 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:36,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:36,392 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:36,393 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:36,394 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [168843453] [2022-11-22 02:47:36,395 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [168843453] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:36,396 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:36,396 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-22 02:47:36,398 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1034311144] [2022-11-22 02:47:36,399 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:36,405 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 02:47:36,406 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:36,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 02:47:36,456 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:47:36,459 INFO L87 Difference]: Start difference. First operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:36,568 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:36,569 INFO L93 Difference]: Finished difference Result 33 states and 37 transitions. [2022-11-22 02:47:36,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 02:47:36,572 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-22 02:47:36,573 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:36,582 INFO L225 Difference]: With dead ends: 33 [2022-11-22 02:47:36,583 INFO L226 Difference]: Without dead ends: 31 [2022-11-22 02:47:36,585 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:47:36,589 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 1 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 39 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:36,591 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 39 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:47:36,613 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-11-22 02:47:36,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2022-11-22 02:47:36,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 16 states have (on average 2.125) internal successors, (34), 30 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:36,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 34 transitions. [2022-11-22 02:47:36,635 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 34 transitions. Word has length 3 [2022-11-22 02:47:36,636 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:36,636 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 34 transitions. [2022-11-22 02:47:36,637 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:36,638 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 34 transitions. [2022-11-22 02:47:36,639 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 02:47:36,639 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:36,640 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 02:47:36,641 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-22 02:47:36,642 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:36,643 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:36,643 INFO L85 PathProgramCache]: Analyzing trace with hash 4702270, now seen corresponding path program 1 times [2022-11-22 02:47:36,643 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:36,644 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [267851888] [2022-11-22 02:47:36,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:36,644 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:36,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:37,038 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:37,039 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:37,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [267851888] [2022-11-22 02:47:37,039 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [267851888] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:37,040 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:37,040 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 02:47:37,040 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [521422115] [2022-11-22 02:47:37,041 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:37,042 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 02:47:37,043 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:37,043 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 02:47:37,044 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:47:37,044 INFO L87 Difference]: Start difference. First operand 31 states and 34 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:37,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:37,093 INFO L93 Difference]: Finished difference Result 29 states and 32 transitions. [2022-11-22 02:47:37,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 02:47:37,094 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 02:47:37,095 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:37,095 INFO L225 Difference]: With dead ends: 29 [2022-11-22 02:47:37,095 INFO L226 Difference]: Without dead ends: 29 [2022-11-22 02:47:37,096 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:47:37,098 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 27 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:37,099 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 13 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:47:37,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-22 02:47:37,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-22 02:47:37,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 16 states have (on average 2.0) internal successors, (32), 28 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:37,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 32 transitions. [2022-11-22 02:47:37,105 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 32 transitions. Word has length 4 [2022-11-22 02:47:37,105 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:37,105 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 32 transitions. [2022-11-22 02:47:37,106 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:37,106 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 32 transitions. [2022-11-22 02:47:37,106 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 02:47:37,107 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:37,107 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 02:47:37,107 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-22 02:47:37,108 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:37,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:37,109 INFO L85 PathProgramCache]: Analyzing trace with hash 4702271, now seen corresponding path program 1 times [2022-11-22 02:47:37,109 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:37,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1037467140] [2022-11-22 02:47:37,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:37,110 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:37,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:37,416 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:37,416 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:37,417 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1037467140] [2022-11-22 02:47:37,417 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1037467140] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:37,417 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:37,417 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:47:37,418 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [384112936] [2022-11-22 02:47:37,418 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:37,418 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 02:47:37,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:37,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 02:47:37,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:47:37,420 INFO L87 Difference]: Start difference. First operand 29 states and 32 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:37,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:37,587 INFO L93 Difference]: Finished difference Result 55 states and 61 transitions. [2022-11-22 02:47:37,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 02:47:37,588 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 02:47:37,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:37,592 INFO L225 Difference]: With dead ends: 55 [2022-11-22 02:47:37,593 INFO L226 Difference]: Without dead ends: 55 [2022-11-22 02:47:37,594 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-22 02:47:37,603 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 88 mSDsluCounter, 22 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 34 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:37,605 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 34 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:47:37,608 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-22 02:47:37,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 31. [2022-11-22 02:47:37,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:37,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-11-22 02:47:37,617 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 4 [2022-11-22 02:47:37,618 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:37,618 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-11-22 02:47:37,618 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:37,619 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-11-22 02:47:37,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 02:47:37,620 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:37,620 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 02:47:37,621 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-22 02:47:37,622 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:37,627 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:37,627 INFO L85 PathProgramCache]: Analyzing trace with hash 145855487, now seen corresponding path program 1 times [2022-11-22 02:47:37,627 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:37,628 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1329100913] [2022-11-22 02:47:37,628 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:37,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:37,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:37,751 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:37,751 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:37,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1329100913] [2022-11-22 02:47:37,752 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1329100913] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:37,752 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:37,752 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 02:47:37,753 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1653430587] [2022-11-22 02:47:37,754 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:37,754 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 02:47:37,755 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:37,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 02:47:37,756 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:47:37,758 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:37,806 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:37,807 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-11-22 02:47:37,807 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 02:47:37,808 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 02:47:37,808 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:37,811 INFO L225 Difference]: With dead ends: 29 [2022-11-22 02:47:37,811 INFO L226 Difference]: Without dead ends: 29 [2022-11-22 02:47:37,812 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:47:37,815 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 24 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:37,819 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 13 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:47:37,822 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-22 02:47:37,825 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-22 02:47:37,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 18 states have (on average 1.8333333333333333) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:37,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-11-22 02:47:37,829 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 5 [2022-11-22 02:47:37,830 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:37,830 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-11-22 02:47:37,831 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:37,831 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-11-22 02:47:37,832 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 02:47:37,833 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:37,833 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 02:47:37,833 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-22 02:47:37,834 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:37,834 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:37,835 INFO L85 PathProgramCache]: Analyzing trace with hash 145855488, now seen corresponding path program 1 times [2022-11-22 02:47:37,835 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:37,835 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1428260264] [2022-11-22 02:47:37,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:37,836 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:37,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:38,264 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:38,264 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:38,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1428260264] [2022-11-22 02:47:38,265 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1428260264] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:38,265 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:38,266 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 02:47:38,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1850640768] [2022-11-22 02:47:38,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:38,267 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 02:47:38,267 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:38,271 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 02:47:38,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-22 02:47:38,272 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:38,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:38,543 INFO L93 Difference]: Finished difference Result 50 states and 56 transitions. [2022-11-22 02:47:38,544 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 02:47:38,544 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 02:47:38,544 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:38,545 INFO L225 Difference]: With dead ends: 50 [2022-11-22 02:47:38,545 INFO L226 Difference]: Without dead ends: 50 [2022-11-22 02:47:38,545 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2022-11-22 02:47:38,546 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 125 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 24 SdHoareTripleChecker+Invalid, 65 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:38,547 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 24 Invalid, 65 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:47:38,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-22 02:47:38,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 31. [2022-11-22 02:47:38,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 20 states have (on average 1.8) internal successors, (36), 30 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:38,550 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 36 transitions. [2022-11-22 02:47:38,551 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 36 transitions. Word has length 5 [2022-11-22 02:47:38,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:38,557 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 36 transitions. [2022-11-22 02:47:38,558 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:38,563 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 36 transitions. [2022-11-22 02:47:38,563 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 02:47:38,564 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:38,564 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 02:47:38,564 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-22 02:47:38,564 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:38,565 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:38,565 INFO L85 PathProgramCache]: Analyzing trace with hash 145857698, now seen corresponding path program 1 times [2022-11-22 02:47:38,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:38,566 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [909430754] [2022-11-22 02:47:38,566 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:38,566 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:38,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:38,796 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:38,796 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:38,796 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [909430754] [2022-11-22 02:47:38,796 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [909430754] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:38,797 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:38,797 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:47:38,797 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1279952442] [2022-11-22 02:47:38,797 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:38,798 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 02:47:38,798 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:38,798 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 02:47:38,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:47:38,799 INFO L87 Difference]: Start difference. First operand 31 states and 36 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:38,969 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:38,969 INFO L93 Difference]: Finished difference Result 54 states and 62 transitions. [2022-11-22 02:47:38,971 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 02:47:38,971 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 02:47:38,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:38,972 INFO L225 Difference]: With dead ends: 54 [2022-11-22 02:47:38,972 INFO L226 Difference]: Without dead ends: 54 [2022-11-22 02:47:38,973 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:47:38,974 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 58 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:38,974 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 28 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 02:47:38,975 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2022-11-22 02:47:38,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 36. [2022-11-22 02:47:38,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 25 states have (on average 1.76) internal successors, (44), 35 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:38,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 44 transitions. [2022-11-22 02:47:38,979 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 44 transitions. Word has length 5 [2022-11-22 02:47:38,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:38,980 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 44 transitions. [2022-11-22 02:47:38,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:38,980 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 44 transitions. [2022-11-22 02:47:38,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-22 02:47:38,981 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:38,981 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-22 02:47:38,981 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-22 02:47:38,982 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:38,982 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:38,982 INFO L85 PathProgramCache]: Analyzing trace with hash 223988269, now seen corresponding path program 1 times [2022-11-22 02:47:38,983 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:38,983 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [134234600] [2022-11-22 02:47:38,983 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:38,983 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:39,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:39,319 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:39,320 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:39,320 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [134234600] [2022-11-22 02:47:39,320 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [134234600] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:47:39,321 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1244030437] [2022-11-22 02:47:39,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:39,321 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:47:39,322 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:47:39,327 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:47:39,332 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-22 02:47:39,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:39,448 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-22 02:47:39,455 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:47:39,697 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:39,707 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 02:47:39,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:47:39,874 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:39,874 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:47:40,224 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:47:40,287 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:40,288 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1244030437] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:47:40,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2133326002] [2022-11-22 02:47:40,325 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-22 02:47:40,326 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:47:40,332 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:47:40,342 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:47:40,343 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:47:40,466 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:40,470 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:40,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:47:40,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:47:40,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:47:40,777 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:47:40,816 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:47:41,379 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '549#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_#t~nondet13#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet13#1|)) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:47:41,380 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:47:41,380 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:47:41,380 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2022-11-22 02:47:41,380 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1274050843] [2022-11-22 02:47:41,380 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:47:41,381 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-22 02:47:41,381 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:41,381 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-22 02:47:41,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=65, Invalid=241, Unknown=0, NotChecked=0, Total=306 [2022-11-22 02:47:41,382 INFO L87 Difference]: Start difference. First operand 36 states and 44 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:41,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:41,994 INFO L93 Difference]: Finished difference Result 78 states and 90 transitions. [2022-11-22 02:47:41,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-22 02:47:41,995 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-22 02:47:41,995 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:41,996 INFO L225 Difference]: With dead ends: 78 [2022-11-22 02:47:41,996 INFO L226 Difference]: Without dead ends: 78 [2022-11-22 02:47:41,997 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=122, Invalid=384, Unknown=0, NotChecked=0, Total=506 [2022-11-22 02:47:41,997 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 356 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 356 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 247 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:41,998 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [356 Valid, 104 Invalid, 247 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 241 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:47:41,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-22 02:47:42,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 34. [2022-11-22 02:47:42,002 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 24 states have (on average 1.75) internal successors, (42), 33 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:42,003 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 42 transitions. [2022-11-22 02:47:42,003 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 42 transitions. Word has length 6 [2022-11-22 02:47:42,003 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:42,004 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 42 transitions. [2022-11-22 02:47:42,004 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:42,004 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 42 transitions. [2022-11-22 02:47:42,005 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-22 02:47:42,005 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:42,005 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-22 02:47:42,028 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-22 02:47:42,223 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:47:42,224 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:42,224 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:42,224 INFO L85 PathProgramCache]: Analyzing trace with hash 226621346, now seen corresponding path program 1 times [2022-11-22 02:47:42,224 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:42,225 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [651134833] [2022-11-22 02:47:42,225 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:42,225 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:42,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:42,531 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:42,531 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:42,532 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [651134833] [2022-11-22 02:47:42,532 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [651134833] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:42,532 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:42,532 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 02:47:42,532 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [787481321] [2022-11-22 02:47:42,533 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:42,533 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 02:47:42,533 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:42,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 02:47:42,534 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-11-22 02:47:42,534 INFO L87 Difference]: Start difference. First operand 34 states and 42 transitions. Second operand has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:42,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:42,780 INFO L93 Difference]: Finished difference Result 53 states and 62 transitions. [2022-11-22 02:47:42,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 02:47:42,780 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-22 02:47:42,781 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:42,781 INFO L225 Difference]: With dead ends: 53 [2022-11-22 02:47:42,781 INFO L226 Difference]: Without dead ends: 53 [2022-11-22 02:47:42,781 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-11-22 02:47:42,782 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 117 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 27 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:42,783 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [117 Valid, 27 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:47:42,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2022-11-22 02:47:42,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 37. [2022-11-22 02:47:42,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 27 states have (on average 1.7037037037037037) internal successors, (46), 36 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:42,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 46 transitions. [2022-11-22 02:47:42,790 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 46 transitions. Word has length 6 [2022-11-22 02:47:42,790 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:42,790 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 46 transitions. [2022-11-22 02:47:42,791 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:42,791 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 46 transitions. [2022-11-22 02:47:42,791 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 02:47:42,791 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:42,791 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:42,792 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-22 02:47:42,792 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:42,792 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:42,792 INFO L85 PathProgramCache]: Analyzing trace with hash -1646210956, now seen corresponding path program 1 times [2022-11-22 02:47:42,793 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:42,793 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1709307429] [2022-11-22 02:47:42,793 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:42,793 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:42,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:43,112 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:43,112 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:43,113 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1709307429] [2022-11-22 02:47:43,113 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1709307429] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:47:43,113 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [766386310] [2022-11-22 02:47:43,113 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:43,113 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:47:43,114 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:47:43,115 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:47:43,149 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-22 02:47:43,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:43,208 INFO L263 TraceCheckSpWp]: Trace formula consists of 73 conjuncts, 19 conjunts are in the unsatisfiable core [2022-11-22 02:47:43,211 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:47:43,262 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:43,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 02:47:43,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:47:43,387 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:43,387 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:47:43,496 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:47:43,520 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:43,520 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [766386310] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-22 02:47:43,520 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-22 02:47:43,522 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5, 3] total 11 [2022-11-22 02:47:43,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [425778784] [2022-11-22 02:47:43,523 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:43,528 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 02:47:43,528 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:43,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 02:47:43,529 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2022-11-22 02:47:43,530 INFO L87 Difference]: Start difference. First operand 37 states and 46 transitions. Second operand has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:43,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:43,638 INFO L93 Difference]: Finished difference Result 37 states and 44 transitions. [2022-11-22 02:47:43,639 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 02:47:43,639 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 02:47:43,639 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:43,640 INFO L225 Difference]: With dead ends: 37 [2022-11-22 02:47:43,640 INFO L226 Difference]: Without dead ends: 37 [2022-11-22 02:47:43,640 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-11-22 02:47:43,643 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 55 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 11 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:43,643 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 11 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:47:43,645 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-22 02:47:43,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 29. [2022-11-22 02:47:43,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 20 states have (on average 1.65) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:43,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-11-22 02:47:43,651 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 7 [2022-11-22 02:47:43,651 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:43,651 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-11-22 02:47:43,652 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:43,652 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-11-22 02:47:43,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 02:47:43,653 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:43,653 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1] [2022-11-22 02:47:43,667 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-11-22 02:47:43,861 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:47:43,861 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:43,862 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:43,862 INFO L85 PathProgramCache]: Analyzing trace with hash -1566735583, now seen corresponding path program 1 times [2022-11-22 02:47:43,862 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:43,862 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1615982375] [2022-11-22 02:47:43,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:43,862 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:43,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:44,129 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:44,129 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:44,129 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1615982375] [2022-11-22 02:47:44,130 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1615982375] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:47:44,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [593437840] [2022-11-22 02:47:44,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:44,130 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:47:44,131 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:47:44,132 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:47:44,140 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-22 02:47:44,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:44,218 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-22 02:47:44,220 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:47:44,295 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:47:44,296 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:47:44,454 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:44,454 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:47:44,646 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:44,646 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [593437840] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:47:44,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1377161162] [2022-11-22 02:47:44,649 INFO L159 IcfgInterpreter]: Started Sifa with 6 locations of interest [2022-11-22 02:47:44,649 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:47:44,649 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:47:44,649 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:47:44,649 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:47:44,702 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:44,705 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:44,706 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:47:44,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:47:44,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:47:44,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:47:44,944 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:47:45,767 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '948#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet15#1| 127) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet15#1|)) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:47:45,767 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:47:45,767 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:47:45,768 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-11-22 02:47:45,768 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1774293872] [2022-11-22 02:47:45,768 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:47:45,768 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-22 02:47:45,768 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:45,769 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-22 02:47:45,769 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=87, Invalid=375, Unknown=0, NotChecked=0, Total=462 [2022-11-22 02:47:45,769 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:46,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:46,505 INFO L93 Difference]: Finished difference Result 63 states and 70 transitions. [2022-11-22 02:47:46,506 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-22 02:47:46,506 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 02:47:46,506 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:46,507 INFO L225 Difference]: With dead ends: 63 [2022-11-22 02:47:46,507 INFO L226 Difference]: Without dead ends: 63 [2022-11-22 02:47:46,507 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 99 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=188, Invalid=624, Unknown=0, NotChecked=0, Total=812 [2022-11-22 02:47:46,508 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 439 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 439 SdHoareTripleChecker+Valid, 88 SdHoareTripleChecker+Invalid, 183 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:46,508 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [439 Valid, 88 Invalid, 183 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 02:47:46,509 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-11-22 02:47:46,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 27. [2022-11-22 02:47:46,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 19 states have (on average 1.631578947368421) internal successors, (31), 26 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:46,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 31 transitions. [2022-11-22 02:47:46,512 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 31 transitions. Word has length 7 [2022-11-22 02:47:46,512 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:46,512 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 31 transitions. [2022-11-22 02:47:46,513 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:46,513 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 31 transitions. [2022-11-22 02:47:46,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 02:47:46,513 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:46,513 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:46,530 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-22 02:47:46,720 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-22 02:47:46,720 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:46,720 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:46,720 INFO L85 PathProgramCache]: Analyzing trace with hash -1564671430, now seen corresponding path program 1 times [2022-11-22 02:47:46,721 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:46,721 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [551752078] [2022-11-22 02:47:46,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:46,721 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:46,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:46,823 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:46,823 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:46,823 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [551752078] [2022-11-22 02:47:46,824 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [551752078] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:46,824 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:46,824 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 02:47:46,824 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [861867437] [2022-11-22 02:47:46,824 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:46,825 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 02:47:46,825 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:46,825 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 02:47:46,825 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:47:46,826 INFO L87 Difference]: Start difference. First operand 27 states and 31 transitions. Second operand has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:46,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:46,865 INFO L93 Difference]: Finished difference Result 26 states and 30 transitions. [2022-11-22 02:47:46,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 02:47:46,865 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 02:47:46,866 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:46,866 INFO L225 Difference]: With dead ends: 26 [2022-11-22 02:47:46,868 INFO L226 Difference]: Without dead ends: 26 [2022-11-22 02:47:46,868 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:47:46,869 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 11 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:46,870 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 14 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:47:46,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26 states. [2022-11-22 02:47:46,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26 to 26. [2022-11-22 02:47:46,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 19 states have (on average 1.5789473684210527) internal successors, (30), 25 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:46,877 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 30 transitions. [2022-11-22 02:47:46,878 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 30 transitions. Word has length 7 [2022-11-22 02:47:46,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:46,878 INFO L495 AbstractCegarLoop]: Abstraction has 26 states and 30 transitions. [2022-11-22 02:47:46,879 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:46,879 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 30 transitions. [2022-11-22 02:47:46,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 02:47:46,880 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:46,880 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:46,881 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-22 02:47:46,881 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:46,881 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:46,882 INFO L85 PathProgramCache]: Analyzing trace with hash -1564671429, now seen corresponding path program 1 times [2022-11-22 02:47:46,882 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:46,882 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [45978447] [2022-11-22 02:47:46,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:46,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:46,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:47,073 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:47,073 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:47,074 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [45978447] [2022-11-22 02:47:47,074 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [45978447] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:47,074 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:47,074 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:47:47,074 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [936769926] [2022-11-22 02:47:47,074 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:47,075 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 02:47:47,075 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:47,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 02:47:47,076 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:47:47,076 INFO L87 Difference]: Start difference. First operand 26 states and 30 transitions. Second operand has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:47,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:47,121 INFO L93 Difference]: Finished difference Result 29 states and 34 transitions. [2022-11-22 02:47:47,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 02:47:47,122 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 02:47:47,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:47,122 INFO L225 Difference]: With dead ends: 29 [2022-11-22 02:47:47,123 INFO L226 Difference]: Without dead ends: 29 [2022-11-22 02:47:47,123 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:47:47,124 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 27 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 23 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:47,125 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 23 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:47:47,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-22 02:47:47,128 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 27. [2022-11-22 02:47:47,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 20 states have (on average 1.55) internal successors, (31), 26 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:47,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 31 transitions. [2022-11-22 02:47:47,134 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 31 transitions. Word has length 7 [2022-11-22 02:47:47,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:47,134 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 31 transitions. [2022-11-22 02:47:47,135 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:47,135 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 31 transitions. [2022-11-22 02:47:47,135 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-22 02:47:47,135 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:47,136 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:47,136 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-22 02:47:47,139 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:47,139 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:47,140 INFO L85 PathProgramCache]: Analyzing trace with hash -1324094303, now seen corresponding path program 1 times [2022-11-22 02:47:47,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:47,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1169941176] [2022-11-22 02:47:47,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:47,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:47,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:47,382 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:47,382 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:47,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1169941176] [2022-11-22 02:47:47,382 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1169941176] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:47:47,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [958544599] [2022-11-22 02:47:47,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:47,383 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:47:47,383 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:47:47,384 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:47:47,391 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-22 02:47:47,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:47,480 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-22 02:47:47,483 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:47:47,573 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 02:47:47,573 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 02:47:47,954 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:47,955 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:47:48,246 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:48,246 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [958544599] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-22 02:47:48,246 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-22 02:47:48,246 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [5, 6] total 17 [2022-11-22 02:47:48,246 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2041985313] [2022-11-22 02:47:48,247 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:48,247 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-22 02:47:48,247 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:48,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-22 02:47:48,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=250, Unknown=0, NotChecked=0, Total=342 [2022-11-22 02:47:48,248 INFO L87 Difference]: Start difference. First operand 27 states and 31 transitions. Second operand has 8 states, 7 states have (on average 1.1428571428571428) internal successors, (8), 7 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:48,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:48,527 INFO L93 Difference]: Finished difference Result 27 states and 31 transitions. [2022-11-22 02:47:48,528 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-22 02:47:48,528 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 1.1428571428571428) internal successors, (8), 7 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-22 02:47:48,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:48,528 INFO L225 Difference]: With dead ends: 27 [2022-11-22 02:47:48,529 INFO L226 Difference]: Without dead ends: 27 [2022-11-22 02:47:48,529 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=132, Invalid=420, Unknown=0, NotChecked=0, Total=552 [2022-11-22 02:47:48,530 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 84 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 7 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:48,530 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 7 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:47:48,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27 states. [2022-11-22 02:47:48,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27 to 23. [2022-11-22 02:47:48,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 17 states have (on average 1.5294117647058822) internal successors, (26), 22 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:48,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 26 transitions. [2022-11-22 02:47:48,533 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 26 transitions. Word has length 8 [2022-11-22 02:47:48,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:48,533 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 26 transitions. [2022-11-22 02:47:48,533 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 1.1428571428571428) internal successors, (8), 7 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:48,533 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions. [2022-11-22 02:47:48,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-22 02:47:48,534 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:48,534 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:48,546 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-22 02:47:48,734 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-22 02:47:48,735 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:48,735 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:48,735 INFO L85 PathProgramCache]: Analyzing trace with hash -410688015, now seen corresponding path program 1 times [2022-11-22 02:47:48,735 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:48,735 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1612478555] [2022-11-22 02:47:48,736 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:48,736 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:48,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:49,117 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:49,117 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:49,118 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1612478555] [2022-11-22 02:47:49,118 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1612478555] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:47:49,118 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [425608318] [2022-11-22 02:47:49,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:49,118 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:47:49,118 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:47:49,120 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:47:49,146 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-22 02:47:49,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:49,207 INFO L263 TraceCheckSpWp]: Trace formula consists of 107 conjuncts, 26 conjunts are in the unsatisfiable core [2022-11-22 02:47:49,212 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:47:49,236 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:47:49,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:47:49,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:47:49,350 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:47:49,351 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-22 02:47:49,463 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:49,463 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:47:49,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 02:47:49,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-22 02:47:49,678 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:49,679 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [425608318] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:47:49,679 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1324327754] [2022-11-22 02:47:49,683 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 02:47:49,684 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:47:49,684 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:47:49,685 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:47:49,685 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:47:49,763 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:49,766 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:49,768 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:47:49,849 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:47:49,927 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:49,928 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:47:50,084 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:47:52,549 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1324327754] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:52,550 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:47:52,550 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [6, 5, 5] total 22 [2022-11-22 02:47:52,551 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1202090792] [2022-11-22 02:47:52,551 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:52,552 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-22 02:47:52,552 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:52,553 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-22 02:47:52,553 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=383, Unknown=0, NotChecked=0, Total=506 [2022-11-22 02:47:52,553 INFO L87 Difference]: Start difference. First operand 23 states and 26 transitions. Second operand has 9 states, 8 states have (on average 1.125) internal successors, (9), 8 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:52,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:52,950 INFO L93 Difference]: Finished difference Result 65 states and 73 transitions. [2022-11-22 02:47:52,951 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-22 02:47:52,951 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 1.125) internal successors, (9), 8 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-22 02:47:52,951 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:52,952 INFO L225 Difference]: With dead ends: 65 [2022-11-22 02:47:52,952 INFO L226 Difference]: Without dead ends: 62 [2022-11-22 02:47:52,952 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 110 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=123, Invalid=383, Unknown=0, NotChecked=0, Total=506 [2022-11-22 02:47:52,953 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 68 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 24 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:52,953 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 24 Invalid, 129 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-22 02:47:52,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-22 02:47:52,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 40. [2022-11-22 02:47:52,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 34 states have (on average 1.5294117647058822) internal successors, (52), 39 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:52,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 52 transitions. [2022-11-22 02:47:52,956 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 52 transitions. Word has length 9 [2022-11-22 02:47:52,957 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:52,957 INFO L495 AbstractCegarLoop]: Abstraction has 40 states and 52 transitions. [2022-11-22 02:47:52,957 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 1.125) internal successors, (9), 8 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:52,957 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 52 transitions. [2022-11-22 02:47:52,957 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-22 02:47:52,957 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:52,958 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:52,975 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-22 02:47:53,158 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-22 02:47:53,159 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:53,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:53,160 INFO L85 PathProgramCache]: Analyzing trace with hash 153538389, now seen corresponding path program 1 times [2022-11-22 02:47:53,160 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:53,160 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [924195284] [2022-11-22 02:47:53,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:53,160 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:53,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:53,248 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:53,248 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:53,249 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [924195284] [2022-11-22 02:47:53,249 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [924195284] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:53,249 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:53,249 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 02:47:53,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1214695054] [2022-11-22 02:47:53,250 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:53,250 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 02:47:53,250 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:53,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 02:47:53,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:47:53,251 INFO L87 Difference]: Start difference. First operand 40 states and 52 transitions. Second operand has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:53,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:53,317 INFO L93 Difference]: Finished difference Result 39 states and 50 transitions. [2022-11-22 02:47:53,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 02:47:53,318 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-22 02:47:53,318 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:53,319 INFO L225 Difference]: With dead ends: 39 [2022-11-22 02:47:53,319 INFO L226 Difference]: Without dead ends: 39 [2022-11-22 02:47:53,319 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-22 02:47:53,320 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 33 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 15 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:53,320 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 15 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:47:53,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2022-11-22 02:47:53,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2022-11-22 02:47:53,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 38 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:53,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 50 transitions. [2022-11-22 02:47:53,324 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 50 transitions. Word has length 10 [2022-11-22 02:47:53,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:53,325 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 50 transitions. [2022-11-22 02:47:53,325 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:53,325 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 50 transitions. [2022-11-22 02:47:53,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-22 02:47:53,326 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:53,326 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:53,326 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-22 02:47:53,327 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:53,327 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:53,327 INFO L85 PathProgramCache]: Analyzing trace with hash 153538390, now seen corresponding path program 1 times [2022-11-22 02:47:53,327 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:53,328 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [561590938] [2022-11-22 02:47:53,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:53,328 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:53,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:53,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:53,449 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:53,449 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [561590938] [2022-11-22 02:47:53,449 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [561590938] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:53,449 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:53,449 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-22 02:47:53,450 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2018793292] [2022-11-22 02:47:53,450 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:53,450 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 02:47:53,450 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:53,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 02:47:53,451 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-22 02:47:53,451 INFO L87 Difference]: Start difference. First operand 39 states and 50 transitions. Second operand has 6 states, 5 states have (on average 2.0) internal successors, (10), 6 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:53,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:53,555 INFO L93 Difference]: Finished difference Result 50 states and 64 transitions. [2022-11-22 02:47:53,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 02:47:53,556 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.0) internal successors, (10), 6 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-22 02:47:53,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:53,557 INFO L225 Difference]: With dead ends: 50 [2022-11-22 02:47:53,557 INFO L226 Difference]: Without dead ends: 50 [2022-11-22 02:47:53,557 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2022-11-22 02:47:53,558 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 37 mSDsluCounter, 17 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 27 SdHoareTripleChecker+Invalid, 70 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:53,558 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 27 Invalid, 70 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:47:53,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-22 02:47:53,560 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 43. [2022-11-22 02:47:53,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 38 states have (on average 1.4210526315789473) internal successors, (54), 42 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:53,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 54 transitions. [2022-11-22 02:47:53,562 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 54 transitions. Word has length 10 [2022-11-22 02:47:53,562 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:53,562 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 54 transitions. [2022-11-22 02:47:53,562 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.0) internal successors, (10), 6 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:53,563 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 54 transitions. [2022-11-22 02:47:53,563 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 02:47:53,563 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:53,564 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:53,564 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-11-22 02:47:53,564 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:53,565 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:53,565 INFO L85 PathProgramCache]: Analyzing trace with hash 661807299, now seen corresponding path program 1 times [2022-11-22 02:47:53,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:53,565 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1446506902] [2022-11-22 02:47:53,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:53,566 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:53,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:53,964 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:53,964 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:53,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1446506902] [2022-11-22 02:47:53,964 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1446506902] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:47:53,965 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2110992739] [2022-11-22 02:47:53,965 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:53,965 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:47:53,965 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:47:53,967 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:47:53,999 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-22 02:47:54,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:54,087 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-22 02:47:54,089 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:47:54,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 02:47:54,213 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:47:54,215 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:47:54,216 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 02:47:54,236 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:47:54,236 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-22 02:47:54,237 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2110992739] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:54,237 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-22 02:47:54,237 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [6] total 13 [2022-11-22 02:47:54,237 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1445291199] [2022-11-22 02:47:54,238 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:54,238 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-22 02:47:54,239 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:54,239 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-22 02:47:54,239 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2022-11-22 02:47:54,240 INFO L87 Difference]: Start difference. First operand 43 states and 54 transitions. Second operand has 7 states, 7 states have (on average 1.5714285714285714) internal successors, (11), 7 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:54,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:54,392 INFO L93 Difference]: Finished difference Result 68 states and 83 transitions. [2022-11-22 02:47:54,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-22 02:47:54,393 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 1.5714285714285714) internal successors, (11), 7 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 02:47:54,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:54,393 INFO L225 Difference]: With dead ends: 68 [2022-11-22 02:47:54,393 INFO L226 Difference]: Without dead ends: 68 [2022-11-22 02:47:54,394 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=50, Invalid=190, Unknown=0, NotChecked=0, Total=240 [2022-11-22 02:47:54,395 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 54 mSDsluCounter, 49 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 61 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:54,395 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 61 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:47:54,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-11-22 02:47:54,398 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 48. [2022-11-22 02:47:54,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 43 states have (on average 1.3953488372093024) internal successors, (60), 47 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:54,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 60 transitions. [2022-11-22 02:47:54,399 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 60 transitions. Word has length 11 [2022-11-22 02:47:54,399 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:54,399 INFO L495 AbstractCegarLoop]: Abstraction has 48 states and 60 transitions. [2022-11-22 02:47:54,400 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 1.5714285714285714) internal successors, (11), 7 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:54,400 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 60 transitions. [2022-11-22 02:47:54,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 02:47:54,401 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:54,401 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:54,414 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-22 02:47:54,601 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-11-22 02:47:54,602 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:54,603 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:54,603 INFO L85 PathProgramCache]: Analyzing trace with hash -1112351598, now seen corresponding path program 1 times [2022-11-22 02:47:54,603 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:54,603 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [959166885] [2022-11-22 02:47:54,603 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:54,603 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:54,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:54,906 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:54,906 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:54,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [959166885] [2022-11-22 02:47:54,906 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [959166885] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:47:54,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [452306252] [2022-11-22 02:47:54,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:54,907 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:47:54,907 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:47:54,909 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:47:54,928 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-22 02:47:55,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:55,018 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-22 02:47:55,020 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:47:55,035 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:47:55,036 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:47:55,111 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:55,112 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:47:55,265 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:55,265 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [452306252] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:47:55,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2145448300] [2022-11-22 02:47:55,268 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:47:55,268 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:47:55,268 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:47:55,268 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:47:55,268 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:47:55,329 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:55,332 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:55,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:47:55,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:47:55,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:47:55,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:47:55,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:47:55,745 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:47:55,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:47:55,928 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:47:57,550 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1903#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:47:57,550 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:47:57,550 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:47:57,550 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 6] total 16 [2022-11-22 02:47:57,551 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [699926954] [2022-11-22 02:47:57,551 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:47:57,551 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-22 02:47:57,551 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:57,552 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-22 02:47:57,552 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=499, Unknown=0, NotChecked=0, Total=600 [2022-11-22 02:47:57,552 INFO L87 Difference]: Start difference. First operand 48 states and 60 transitions. Second operand has 17 states, 16 states have (on average 1.8125) internal successors, (29), 17 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:57,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:57,863 INFO L93 Difference]: Finished difference Result 91 states and 112 transitions. [2022-11-22 02:47:57,864 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-22 02:47:57,864 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.8125) internal successors, (29), 17 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 02:47:57,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:57,865 INFO L225 Difference]: With dead ends: 91 [2022-11-22 02:47:57,865 INFO L226 Difference]: Without dead ends: 91 [2022-11-22 02:47:57,866 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 235 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=155, Invalid=715, Unknown=0, NotChecked=0, Total=870 [2022-11-22 02:47:57,867 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 154 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 202 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 154 SdHoareTripleChecker+Valid, 116 SdHoareTripleChecker+Invalid, 212 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 202 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:57,867 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [154 Valid, 116 Invalid, 212 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 202 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 02:47:57,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-22 02:47:57,870 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 52. [2022-11-22 02:47:57,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 47 states have (on average 1.4042553191489362) internal successors, (66), 51 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:57,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 66 transitions. [2022-11-22 02:47:57,871 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 66 transitions. Word has length 11 [2022-11-22 02:47:57,871 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:57,872 INFO L495 AbstractCegarLoop]: Abstraction has 52 states and 66 transitions. [2022-11-22 02:47:57,872 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.8125) internal successors, (29), 17 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:57,872 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 66 transitions. [2022-11-22 02:47:57,873 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 02:47:57,873 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:57,873 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:57,888 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-22 02:47:58,080 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-11-22 02:47:58,081 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:58,081 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:58,081 INFO L85 PathProgramCache]: Analyzing trace with hash 464722824, now seen corresponding path program 1 times [2022-11-22 02:47:58,081 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:58,081 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1943753881] [2022-11-22 02:47:58,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:58,082 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:58,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:58,132 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:58,134 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:58,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1943753881] [2022-11-22 02:47:58,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1943753881] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:58,135 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:58,135 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:47:58,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [671186083] [2022-11-22 02:47:58,136 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:58,136 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 02:47:58,136 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:58,137 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 02:47:58,137 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:47:58,137 INFO L87 Difference]: Start difference. First operand 52 states and 66 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:58,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:58,191 INFO L93 Difference]: Finished difference Result 51 states and 64 transitions. [2022-11-22 02:47:58,192 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 02:47:58,192 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 02:47:58,194 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:58,195 INFO L225 Difference]: With dead ends: 51 [2022-11-22 02:47:58,195 INFO L226 Difference]: Without dead ends: 51 [2022-11-22 02:47:58,195 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:47:58,196 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 10 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:58,197 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 14 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:47:58,198 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2022-11-22 02:47:58,207 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2022-11-22 02:47:58,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 47 states have (on average 1.3617021276595744) internal successors, (64), 50 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:58,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 64 transitions. [2022-11-22 02:47:58,209 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 64 transitions. Word has length 11 [2022-11-22 02:47:58,209 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:58,209 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 64 transitions. [2022-11-22 02:47:58,209 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:58,210 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 64 transitions. [2022-11-22 02:47:58,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 02:47:58,213 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:58,213 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:58,213 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-11-22 02:47:58,213 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:58,217 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:58,218 INFO L85 PathProgramCache]: Analyzing trace with hash 464722825, now seen corresponding path program 1 times [2022-11-22 02:47:58,218 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:58,218 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [808424315] [2022-11-22 02:47:58,218 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:58,219 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:58,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:58,377 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:58,377 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:58,378 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [808424315] [2022-11-22 02:47:58,378 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [808424315] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:47:58,378 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:47:58,378 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 02:47:58,378 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [608152367] [2022-11-22 02:47:58,379 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:47:58,379 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 02:47:58,379 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:47:58,380 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 02:47:58,380 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:47:58,381 INFO L87 Difference]: Start difference. First operand 51 states and 64 transitions. Second operand has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:58,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:47:58,455 INFO L93 Difference]: Finished difference Result 59 states and 73 transitions. [2022-11-22 02:47:58,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 02:47:58,455 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 02:47:58,456 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:47:58,457 INFO L225 Difference]: With dead ends: 59 [2022-11-22 02:47:58,457 INFO L226 Difference]: Without dead ends: 59 [2022-11-22 02:47:58,457 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-22 02:47:58,459 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 27 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 21 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:47:58,459 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 21 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:47:58,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-22 02:47:58,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 57. [2022-11-22 02:47:58,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 53 states have (on average 1.320754716981132) internal successors, (70), 56 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:58,467 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 70 transitions. [2022-11-22 02:47:58,467 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 70 transitions. Word has length 11 [2022-11-22 02:47:58,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:47:58,468 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 70 transitions. [2022-11-22 02:47:58,468 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:47:58,468 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 70 transitions. [2022-11-22 02:47:58,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-22 02:47:58,470 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:47:58,470 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:47:58,470 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-11-22 02:47:58,470 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:47:58,471 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:47:58,471 INFO L85 PathProgramCache]: Analyzing trace with hash 476972680, now seen corresponding path program 2 times [2022-11-22 02:47:58,471 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:47:58,471 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [927954572] [2022-11-22 02:47:58,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:47:58,472 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:47:58,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:47:59,035 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:59,036 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:47:59,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [927954572] [2022-11-22 02:47:59,036 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [927954572] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:47:59,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [248778415] [2022-11-22 02:47:59,036 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:47:59,036 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:47:59,037 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:47:59,038 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:47:59,041 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-22 02:47:59,141 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 02:47:59,141 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:47:59,142 INFO L263 TraceCheckSpWp]: Trace formula consists of 131 conjuncts, 32 conjunts are in the unsatisfiable core [2022-11-22 02:47:59,149 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:47:59,177 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:47:59,177 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:47:59,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:47:59,392 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:47:59,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 15 [2022-11-22 02:47:59,451 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:59,451 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:47:59,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 02:47:59,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 02:47:59,868 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:47:59,869 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [248778415] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:47:59,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1940161228] [2022-11-22 02:47:59,871 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:47:59,871 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:47:59,872 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:47:59,872 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:47:59,872 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:47:59,929 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:59,932 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:47:59,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:48:00,005 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:00,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:00,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:00,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:00,374 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:48:00,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:48:00,555 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:48:02,166 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2393#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:48:02,166 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:48:02,166 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:48:02,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8, 8] total 23 [2022-11-22 02:48:02,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1287008370] [2022-11-22 02:48:02,167 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:48:02,167 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-22 02:48:02,168 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:02,168 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-22 02:48:02,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=144, Invalid=848, Unknown=0, NotChecked=0, Total=992 [2022-11-22 02:48:02,169 INFO L87 Difference]: Start difference. First operand 57 states and 70 transitions. Second operand has 24 states, 23 states have (on average 1.608695652173913) internal successors, (37), 24 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:03,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:03,792 INFO L93 Difference]: Finished difference Result 110 states and 131 transitions. [2022-11-22 02:48:03,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-22 02:48:03,793 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 1.608695652173913) internal successors, (37), 24 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-22 02:48:03,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:03,793 INFO L225 Difference]: With dead ends: 110 [2022-11-22 02:48:03,793 INFO L226 Difference]: Without dead ends: 110 [2022-11-22 02:48:03,794 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 311 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=331, Invalid=1561, Unknown=0, NotChecked=0, Total=1892 [2022-11-22 02:48:03,795 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 344 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 385 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 344 SdHoareTripleChecker+Valid, 100 SdHoareTripleChecker+Invalid, 401 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 385 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:03,796 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [344 Valid, 100 Invalid, 401 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 385 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-22 02:48:03,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2022-11-22 02:48:03,798 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 61. [2022-11-22 02:48:03,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 60 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:03,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 76 transitions. [2022-11-22 02:48:03,799 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 76 transitions. Word has length 13 [2022-11-22 02:48:03,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:03,800 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 76 transitions. [2022-11-22 02:48:03,800 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 1.608695652173913) internal successors, (37), 24 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:03,800 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 76 transitions. [2022-11-22 02:48:03,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2022-11-22 02:48:03,801 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:03,801 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:03,808 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-22 02:48:04,008 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:48:04,009 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:04,009 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:04,009 INFO L85 PathProgramCache]: Analyzing trace with hash 1878121950, now seen corresponding path program 1 times [2022-11-22 02:48:04,010 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:04,010 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [686021832] [2022-11-22 02:48:04,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:04,010 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:04,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:04,508 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:04,508 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:04,508 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [686021832] [2022-11-22 02:48:04,508 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [686021832] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:48:04,509 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:48:04,509 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-22 02:48:04,509 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2063468812] [2022-11-22 02:48:04,509 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:48:04,509 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-22 02:48:04,509 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:04,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-22 02:48:04,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2022-11-22 02:48:04,510 INFO L87 Difference]: Start difference. First operand 61 states and 76 transitions. Second operand has 10 states, 10 states have (on average 1.4) internal successors, (14), 10 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:04,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:04,876 INFO L93 Difference]: Finished difference Result 68 states and 79 transitions. [2022-11-22 02:48:04,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-22 02:48:04,880 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 1.4) internal successors, (14), 10 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 14 [2022-11-22 02:48:04,880 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:04,881 INFO L225 Difference]: With dead ends: 68 [2022-11-22 02:48:04,881 INFO L226 Difference]: Without dead ends: 60 [2022-11-22 02:48:04,881 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=69, Invalid=171, Unknown=0, NotChecked=0, Total=240 [2022-11-22 02:48:04,882 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 42 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 82 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:04,882 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 82 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:48:04,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2022-11-22 02:48:04,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 54. [2022-11-22 02:48:04,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 50 states have (on average 1.34) internal successors, (67), 53 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:04,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 67 transitions. [2022-11-22 02:48:04,885 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 67 transitions. Word has length 14 [2022-11-22 02:48:04,885 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:04,885 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 67 transitions. [2022-11-22 02:48:04,885 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 1.4) internal successors, (14), 10 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:04,885 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 67 transitions. [2022-11-22 02:48:04,886 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-22 02:48:04,886 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:04,886 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:04,889 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-11-22 02:48:04,889 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:04,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:04,890 INFO L85 PathProgramCache]: Analyzing trace with hash -1190753538, now seen corresponding path program 3 times [2022-11-22 02:48:04,890 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:04,891 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [206175477] [2022-11-22 02:48:04,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:04,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:04,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:05,260 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 6 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:48:05,261 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:05,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [206175477] [2022-11-22 02:48:05,261 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [206175477] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:48:05,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1214357092] [2022-11-22 02:48:05,261 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:48:05,262 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:48:05,262 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:48:05,263 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:48:05,287 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-22 02:48:05,376 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:48:05,376 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:48:05,378 INFO L263 TraceCheckSpWp]: Trace formula consists of 142 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-22 02:48:05,380 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:48:05,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:05,584 INFO L321 Elim1Store]: treesize reduction 9, result has 47.1 percent of original size [2022-11-22 02:48:05,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 28 treesize of output 18 [2022-11-22 02:48:05,590 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 6 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:48:05,591 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:48:05,651 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-11-22 02:48:05,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-11-22 02:48:05,814 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:48:05,814 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1214357092] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:48:05,814 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1324055034] [2022-11-22 02:48:05,816 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:48:05,816 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:48:05,816 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:48:05,817 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:48:05,817 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:48:05,868 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:05,873 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:05,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:48:05,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:06,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:06,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:06,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:06,270 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:48:06,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:48:06,445 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:48:07,880 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2846#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:48:07,880 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:48:07,881 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:48:07,881 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-11-22 02:48:07,881 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [157405208] [2022-11-22 02:48:07,881 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:48:07,881 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-22 02:48:07,882 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:07,882 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-22 02:48:07,882 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=120, Invalid=750, Unknown=0, NotChecked=0, Total=870 [2022-11-22 02:48:07,883 INFO L87 Difference]: Start difference. First operand 54 states and 67 transitions. Second operand has 22 states, 22 states have (on average 1.5) internal successors, (33), 22 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:08,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:08,668 INFO L93 Difference]: Finished difference Result 104 states and 122 transitions. [2022-11-22 02:48:08,668 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-22 02:48:08,669 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 1.5) internal successors, (33), 22 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-22 02:48:08,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:08,671 INFO L225 Difference]: With dead ends: 104 [2022-11-22 02:48:08,671 INFO L226 Difference]: Without dead ends: 104 [2022-11-22 02:48:08,672 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 24 SyntacticMatches, 1 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 444 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=299, Invalid=1423, Unknown=0, NotChecked=0, Total=1722 [2022-11-22 02:48:08,673 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 200 mSDsluCounter, 146 mSDsCounter, 0 mSdLazyCounter, 264 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 200 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 273 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 264 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:08,673 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [200 Valid, 163 Invalid, 273 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 264 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:48:08,674 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-11-22 02:48:08,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 70. [2022-11-22 02:48:08,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 66 states have (on average 1.303030303030303) internal successors, (86), 69 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:08,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 86 transitions. [2022-11-22 02:48:08,677 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 86 transitions. Word has length 15 [2022-11-22 02:48:08,677 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:08,677 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 86 transitions. [2022-11-22 02:48:08,678 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 1.5) internal successors, (33), 22 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:08,678 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 86 transitions. [2022-11-22 02:48:08,678 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-22 02:48:08,678 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:08,679 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:08,691 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-22 02:48:08,891 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-22 02:48:08,892 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:08,892 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:08,892 INFO L85 PathProgramCache]: Analyzing trace with hash -1191841184, now seen corresponding path program 1 times [2022-11-22 02:48:08,892 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:08,893 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [993018721] [2022-11-22 02:48:08,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:08,893 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:08,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:09,094 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:48:09,095 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:09,095 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [993018721] [2022-11-22 02:48:09,095 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [993018721] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:48:09,095 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1325692227] [2022-11-22 02:48:09,096 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:09,096 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:48:09,096 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:48:09,098 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:48:09,114 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-22 02:48:09,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:09,224 INFO L263 TraceCheckSpWp]: Trace formula consists of 150 conjuncts, 21 conjunts are in the unsatisfiable core [2022-11-22 02:48:09,226 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:48:09,314 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:09,314 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:48:09,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:48:09,465 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:09,465 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1325692227] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:48:09,466 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [26008708] [2022-11-22 02:48:09,469 INFO L159 IcfgInterpreter]: Started Sifa with 13 locations of interest [2022-11-22 02:48:09,470 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:48:09,470 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:48:09,470 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:48:09,471 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:48:09,548 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:09,550 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:09,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:48:09,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:09,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:09,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:09,759 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:48:09,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:48:10,008 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:48:11,942 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [26008708] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:48:11,942 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:48:11,943 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [6, 7, 7] total 25 [2022-11-22 02:48:11,943 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [672188270] [2022-11-22 02:48:11,943 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:48:11,944 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-22 02:48:11,944 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:11,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-22 02:48:11,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=97, Invalid=553, Unknown=0, NotChecked=0, Total=650 [2022-11-22 02:48:11,945 INFO L87 Difference]: Start difference. First operand 70 states and 86 transitions. Second operand has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:16,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:16,234 INFO L93 Difference]: Finished difference Result 75 states and 88 transitions. [2022-11-22 02:48:16,235 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-22 02:48:16,235 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-22 02:48:16,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:16,236 INFO L225 Difference]: With dead ends: 75 [2022-11-22 02:48:16,236 INFO L226 Difference]: Without dead ends: 75 [2022-11-22 02:48:16,237 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 23 SyntacticMatches, 2 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 194 ImplicationChecksByTransitivity, 5.8s TimeCoverageRelationStatistics Valid=202, Invalid=988, Unknown=0, NotChecked=0, Total=1190 [2022-11-22 02:48:16,237 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 47 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 236 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 67 SdHoareTripleChecker+Invalid, 237 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 236 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:16,238 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 67 Invalid, 237 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 236 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-22 02:48:16,238 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-22 02:48:16,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 71. [2022-11-22 02:48:16,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 67 states have (on average 1.2985074626865671) internal successors, (87), 70 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:16,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 87 transitions. [2022-11-22 02:48:16,241 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 87 transitions. Word has length 15 [2022-11-22 02:48:16,241 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:16,242 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 87 transitions. [2022-11-22 02:48:16,242 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:16,242 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 87 transitions. [2022-11-22 02:48:16,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-22 02:48:16,243 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:16,243 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:16,255 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2022-11-22 02:48:16,449 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-11-22 02:48:16,450 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:16,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:16,450 INFO L85 PathProgramCache]: Analyzing trace with hash 1164628604, now seen corresponding path program 1 times [2022-11-22 02:48:16,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:16,451 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1422980365] [2022-11-22 02:48:16,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:16,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:16,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:16,644 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:48:16,644 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:16,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1422980365] [2022-11-22 02:48:16,645 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1422980365] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:48:16,646 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:48:16,646 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 02:48:16,647 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [452094524] [2022-11-22 02:48:16,647 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:48:16,647 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 02:48:16,647 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:16,648 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 02:48:16,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:48:16,648 INFO L87 Difference]: Start difference. First operand 71 states and 87 transitions. Second operand has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:16,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:16,684 INFO L93 Difference]: Finished difference Result 70 states and 86 transitions. [2022-11-22 02:48:16,684 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 02:48:16,685 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-22 02:48:16,685 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:16,685 INFO L225 Difference]: With dead ends: 70 [2022-11-22 02:48:16,686 INFO L226 Difference]: Without dead ends: 68 [2022-11-22 02:48:16,686 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 1 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:48:16,686 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 7 mSDsluCounter, 9 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:16,687 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 18 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:48:16,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-11-22 02:48:16,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 59. [2022-11-22 02:48:16,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 58 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:16,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 73 transitions. [2022-11-22 02:48:16,690 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 73 transitions. Word has length 16 [2022-11-22 02:48:16,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:16,690 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 73 transitions. [2022-11-22 02:48:16,690 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:16,690 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 73 transitions. [2022-11-22 02:48:16,691 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-22 02:48:16,691 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:16,691 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:16,691 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24 [2022-11-22 02:48:16,692 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:16,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:16,692 INFO L85 PathProgramCache]: Analyzing trace with hash 1164629580, now seen corresponding path program 1 times [2022-11-22 02:48:16,692 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:16,692 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [227161975] [2022-11-22 02:48:16,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:16,693 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:16,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:16,985 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:16,985 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:16,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [227161975] [2022-11-22 02:48:16,986 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [227161975] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:48:16,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1704339467] [2022-11-22 02:48:16,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:16,986 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:48:16,986 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:48:16,988 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:48:17,026 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-22 02:48:17,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:17,122 INFO L263 TraceCheckSpWp]: Trace formula consists of 164 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-22 02:48:17,123 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:48:17,264 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:17,264 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:48:17,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:48:17,484 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:17,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1704339467] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:48:17,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [980522342] [2022-11-22 02:48:17,486 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:48:17,487 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:48:17,487 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:48:17,487 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:48:17,487 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:48:17,535 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:17,538 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:17,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:48:17,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:17,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:17,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:17,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:17,825 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:48:17,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:48:18,003 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:48:18,004 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:48:18,046 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:48:18,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:48:18,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:18,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:18,468 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:48:21,804 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3569#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:48:21,805 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:48:21,805 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:48:21,805 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8, 8] total 19 [2022-11-22 02:48:21,805 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1149112700] [2022-11-22 02:48:21,805 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:48:21,806 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-22 02:48:21,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:21,806 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-22 02:48:21,807 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=133, Invalid=923, Unknown=0, NotChecked=0, Total=1056 [2022-11-22 02:48:21,807 INFO L87 Difference]: Start difference. First operand 59 states and 73 transitions. Second operand has 20 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 20 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:22,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:22,346 INFO L93 Difference]: Finished difference Result 80 states and 93 transitions. [2022-11-22 02:48:22,347 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-22 02:48:22,347 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 20 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-22 02:48:22,347 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:22,348 INFO L225 Difference]: With dead ends: 80 [2022-11-22 02:48:22,348 INFO L226 Difference]: Without dead ends: 80 [2022-11-22 02:48:22,349 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 22 SyntacticMatches, 2 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 386 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=223, Invalid=1417, Unknown=0, NotChecked=0, Total=1640 [2022-11-22 02:48:22,350 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 110 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 411 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 110 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 420 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 411 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:22,350 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [110 Valid, 97 Invalid, 420 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 411 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:48:22,351 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-11-22 02:48:22,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 68. [2022-11-22 02:48:22,353 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 65 states have (on average 1.2769230769230768) internal successors, (83), 67 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:22,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 83 transitions. [2022-11-22 02:48:22,353 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 83 transitions. Word has length 16 [2022-11-22 02:48:22,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:22,354 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 83 transitions. [2022-11-22 02:48:22,354 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 20 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:22,354 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 83 transitions. [2022-11-22 02:48:22,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-22 02:48:22,354 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:22,355 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:22,360 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-22 02:48:22,555 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-11-22 02:48:22,555 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:22,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:22,556 INFO L85 PathProgramCache]: Analyzing trace with hash -1835268174, now seen corresponding path program 1 times [2022-11-22 02:48:22,556 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:22,556 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [558369781] [2022-11-22 02:48:22,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:22,556 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:22,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:22,808 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 02:48:22,808 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:22,808 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [558369781] [2022-11-22 02:48:22,808 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [558369781] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:48:22,809 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1445706659] [2022-11-22 02:48:22,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:22,809 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:48:22,809 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:48:22,811 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:48:22,839 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-22 02:48:22,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:22,948 INFO L263 TraceCheckSpWp]: Trace formula consists of 163 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-22 02:48:22,952 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:48:22,966 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:48:22,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:48:23,062 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:48:23,062 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:48:23,236 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:48:23,236 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1445706659] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:48:23,236 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [712136141] [2022-11-22 02:48:23,238 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:48:23,238 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:48:23,239 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:48:23,239 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:48:23,239 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:48:23,287 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:23,291 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:23,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:48:23,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:23,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:23,457 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:23,535 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:23,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:23,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:23,664 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:48:23,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:48:23,902 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:48:25,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [712136141] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:48:25,781 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:48:25,782 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [6, 7, 7] total 28 [2022-11-22 02:48:25,782 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1020561973] [2022-11-22 02:48:25,782 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:48:25,783 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-22 02:48:25,783 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:25,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-22 02:48:25,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=126, Invalid=686, Unknown=0, NotChecked=0, Total=812 [2022-11-22 02:48:25,784 INFO L87 Difference]: Start difference. First operand 68 states and 83 transitions. Second operand has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:27,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:27,692 INFO L93 Difference]: Finished difference Result 68 states and 82 transitions. [2022-11-22 02:48:27,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-22 02:48:27,692 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-22 02:48:27,693 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:27,694 INFO L225 Difference]: With dead ends: 68 [2022-11-22 02:48:27,694 INFO L226 Difference]: Without dead ends: 68 [2022-11-22 02:48:27,695 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 209 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=188, Invalid=934, Unknown=0, NotChecked=0, Total=1122 [2022-11-22 02:48:27,696 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 55 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 109 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:27,696 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 17 Invalid, 109 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 02:48:27,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-11-22 02:48:27,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 63. [2022-11-22 02:48:27,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 60 states have (on average 1.2833333333333334) internal successors, (77), 62 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:27,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 77 transitions. [2022-11-22 02:48:27,699 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 77 transitions. Word has length 17 [2022-11-22 02:48:27,700 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:27,700 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 77 transitions. [2022-11-22 02:48:27,700 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:27,700 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 77 transitions. [2022-11-22 02:48:27,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-22 02:48:27,701 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:27,701 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:27,708 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-22 02:48:27,908 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-22 02:48:27,908 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:27,909 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:27,909 INFO L85 PathProgramCache]: Analyzing trace with hash 1743778643, now seen corresponding path program 1 times [2022-11-22 02:48:27,909 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:27,910 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2109004633] [2022-11-22 02:48:27,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:27,910 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:27,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:28,355 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:28,355 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:28,356 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2109004633] [2022-11-22 02:48:28,356 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2109004633] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:48:28,356 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1192338936] [2022-11-22 02:48:28,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:28,356 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:48:28,356 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:48:28,358 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:48:28,383 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-22 02:48:28,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:28,493 INFO L263 TraceCheckSpWp]: Trace formula consists of 170 conjuncts, 31 conjunts are in the unsatisfiable core [2022-11-22 02:48:28,496 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:48:28,565 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:48:28,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:48:28,843 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:28,843 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:48:29,186 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:29,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1192338936] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:48:29,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [556816053] [2022-11-22 02:48:29,188 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:48:29,188 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:48:29,189 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:48:29,189 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:48:29,189 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:48:29,241 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:29,245 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:29,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:48:29,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:29,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:29,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:29,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:29,549 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:48:29,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:48:29,709 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:48:29,710 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:48:29,756 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:48:29,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:48:29,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:30,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:30,163 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:48:33,073 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4132#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:48:33,073 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:48:33,073 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:48:33,073 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 22 [2022-11-22 02:48:33,073 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1176928717] [2022-11-22 02:48:33,073 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:48:33,074 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-22 02:48:33,074 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:33,074 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-22 02:48:33,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=180, Invalid=1152, Unknown=0, NotChecked=0, Total=1332 [2022-11-22 02:48:33,075 INFO L87 Difference]: Start difference. First operand 63 states and 77 transitions. Second operand has 24 states, 23 states have (on average 2.217391304347826) internal successors, (51), 23 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:34,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:34,336 INFO L93 Difference]: Finished difference Result 91 states and 104 transitions. [2022-11-22 02:48:34,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-22 02:48:34,337 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 2.217391304347826) internal successors, (51), 23 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-22 02:48:34,337 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:34,338 INFO L225 Difference]: With dead ends: 91 [2022-11-22 02:48:34,338 INFO L226 Difference]: Without dead ends: 91 [2022-11-22 02:48:34,339 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 488 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=349, Invalid=2003, Unknown=0, NotChecked=0, Total=2352 [2022-11-22 02:48:34,339 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 265 mSDsluCounter, 37 mSDsCounter, 0 mSdLazyCounter, 362 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 265 SdHoareTripleChecker+Valid, 43 SdHoareTripleChecker+Invalid, 387 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:34,340 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [265 Valid, 43 Invalid, 387 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 362 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-22 02:48:34,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-22 02:48:34,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 79. [2022-11-22 02:48:34,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 76 states have (on average 1.236842105263158) internal successors, (94), 78 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:34,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 94 transitions. [2022-11-22 02:48:34,343 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 94 transitions. Word has length 17 [2022-11-22 02:48:34,343 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:34,343 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 94 transitions. [2022-11-22 02:48:34,344 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 2.217391304347826) internal successors, (51), 23 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:34,344 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 94 transitions. [2022-11-22 02:48:34,344 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-22 02:48:34,345 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:34,345 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:34,351 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-11-22 02:48:34,550 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-22 02:48:34,551 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:34,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:34,551 INFO L85 PathProgramCache]: Analyzing trace with hash -577846049, now seen corresponding path program 4 times [2022-11-22 02:48:34,551 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:34,552 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2107352775] [2022-11-22 02:48:34,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:34,552 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:34,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:35,033 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:35,033 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:35,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2107352775] [2022-11-22 02:48:35,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2107352775] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:48:35,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1839539115] [2022-11-22 02:48:35,034 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:48:35,034 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:48:35,034 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:48:35,038 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:48:35,039 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-22 02:48:35,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:35,161 INFO L263 TraceCheckSpWp]: Trace formula consists of 155 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-22 02:48:35,163 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:48:35,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:35,655 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:48:35,658 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:48:35,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 02:48:35,689 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:35,689 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:48:35,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 02:48:35,844 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2022-11-22 02:48:36,198 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:36,198 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1839539115] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:48:36,199 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1948147886] [2022-11-22 02:48:36,200 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:48:36,200 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:48:36,200 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:48:36,200 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:48:36,201 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:48:36,247 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:36,251 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:36,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:48:36,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:36,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:36,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:36,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:36,533 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:48:36,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:48:36,684 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:48:38,286 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4467#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:48:38,286 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:48:38,286 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:48:38,286 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 13] total 32 [2022-11-22 02:48:38,287 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1382461305] [2022-11-22 02:48:38,287 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:48:38,287 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-22 02:48:38,288 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:38,289 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-22 02:48:38,290 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=137, Invalid=1423, Unknown=0, NotChecked=0, Total=1560 [2022-11-22 02:48:38,290 INFO L87 Difference]: Start difference. First operand 79 states and 94 transitions. Second operand has 32 states, 32 states have (on average 1.46875) internal successors, (47), 32 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:41,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:41,612 INFO L93 Difference]: Finished difference Result 209 states and 236 transitions. [2022-11-22 02:48:41,613 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-22 02:48:41,613 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.46875) internal successors, (47), 32 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-22 02:48:41,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:41,614 INFO L225 Difference]: With dead ends: 209 [2022-11-22 02:48:41,615 INFO L226 Difference]: Without dead ends: 209 [2022-11-22 02:48:41,617 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 20 SyntacticMatches, 1 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 657 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=482, Invalid=3300, Unknown=0, NotChecked=0, Total=3782 [2022-11-22 02:48:41,617 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 579 mSDsluCounter, 166 mSDsCounter, 0 mSdLazyCounter, 895 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 579 SdHoareTripleChecker+Valid, 178 SdHoareTripleChecker+Invalid, 914 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 895 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:41,618 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [579 Valid, 178 Invalid, 914 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 895 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-22 02:48:41,618 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2022-11-22 02:48:41,621 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 101. [2022-11-22 02:48:41,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 98 states have (on average 1.2551020408163265) internal successors, (123), 100 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:41,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 123 transitions. [2022-11-22 02:48:41,623 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 123 transitions. Word has length 17 [2022-11-22 02:48:41,623 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:41,623 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 123 transitions. [2022-11-22 02:48:41,623 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.46875) internal successors, (47), 32 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:41,624 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 123 transitions. [2022-11-22 02:48:41,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-22 02:48:41,624 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:41,624 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:41,639 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-22 02:48:41,836 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-22 02:48:41,837 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:41,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:41,837 INFO L85 PathProgramCache]: Analyzing trace with hash 353960871, now seen corresponding path program 1 times [2022-11-22 02:48:41,837 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:41,837 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [209055751] [2022-11-22 02:48:41,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:41,838 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:41,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:42,137 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-22 02:48:42,137 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:42,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [209055751] [2022-11-22 02:48:42,138 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [209055751] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:48:42,139 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:48:42,139 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-22 02:48:42,139 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1289122092] [2022-11-22 02:48:42,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:48:42,141 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-22 02:48:42,141 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:42,142 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-22 02:48:42,142 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-11-22 02:48:42,142 INFO L87 Difference]: Start difference. First operand 101 states and 123 transitions. Second operand has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:42,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:42,316 INFO L93 Difference]: Finished difference Result 107 states and 127 transitions. [2022-11-22 02:48:42,317 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-22 02:48:42,317 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-22 02:48:42,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:42,319 INFO L225 Difference]: With dead ends: 107 [2022-11-22 02:48:42,319 INFO L226 Difference]: Without dead ends: 91 [2022-11-22 02:48:42,320 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2022-11-22 02:48:42,320 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 31 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 93 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 93 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:42,321 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 53 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 93 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:48:42,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-22 02:48:42,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 89. [2022-11-22 02:48:42,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 86 states have (on average 1.2209302325581395) internal successors, (105), 88 states have internal predecessors, (105), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:42,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 105 transitions. [2022-11-22 02:48:42,325 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 105 transitions. Word has length 18 [2022-11-22 02:48:42,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:42,325 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 105 transitions. [2022-11-22 02:48:42,326 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:42,326 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 105 transitions. [2022-11-22 02:48:42,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-22 02:48:42,326 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:42,326 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:42,327 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29 [2022-11-22 02:48:42,328 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:42,328 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:42,328 INFO L85 PathProgramCache]: Analyzing trace with hash 1280145876, now seen corresponding path program 2 times [2022-11-22 02:48:42,328 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:42,329 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [825755649] [2022-11-22 02:48:42,329 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:42,329 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:42,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:42,907 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:42,907 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:42,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [825755649] [2022-11-22 02:48:42,908 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [825755649] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:48:42,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1075087612] [2022-11-22 02:48:42,908 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:48:42,908 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:48:42,908 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:48:42,912 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:48:42,931 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-22 02:48:43,166 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 02:48:43,166 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:48:43,169 INFO L263 TraceCheckSpWp]: Trace formula consists of 195 conjuncts, 54 conjunts are in the unsatisfiable core [2022-11-22 02:48:43,172 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:48:43,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:48:43,260 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:43,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 02:48:43,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 02:48:43,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 02:48:43,374 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:43,374 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:48:43,426 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_485 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_485) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-22 02:48:43,488 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_485 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_485) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0)) is different from false [2022-11-22 02:48:43,496 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:48:43,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:48:43,505 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:48:43,505 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:48:43,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 02:48:43,665 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-11-22 02:48:43,665 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1075087612] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:48:43,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [809575135] [2022-11-22 02:48:43,667 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:48:43,668 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:48:43,668 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:48:43,668 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:48:43,669 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:48:43,719 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:43,722 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:43,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:48:43,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:43,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:43,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:43,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:43,996 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:48:43,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:48:44,176 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:48:44,177 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:48:44,221 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:48:44,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:48:44,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:44,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:44,536 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:48:47,285 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5178#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:48:47,286 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:48:47,286 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:48:47,286 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 23 [2022-11-22 02:48:47,286 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2140255480] [2022-11-22 02:48:47,286 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:48:47,286 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-22 02:48:47,286 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:47,287 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-22 02:48:47,287 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=125, Invalid=1001, Unknown=4, NotChecked=130, Total=1260 [2022-11-22 02:48:47,288 INFO L87 Difference]: Start difference. First operand 89 states and 105 transitions. Second operand has 23 states, 23 states have (on average 1.6956521739130435) internal successors, (39), 23 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:48,053 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:48,054 INFO L93 Difference]: Finished difference Result 154 states and 179 transitions. [2022-11-22 02:48:48,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-22 02:48:48,055 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 1.6956521739130435) internal successors, (39), 23 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-22 02:48:48,055 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:48,056 INFO L225 Difference]: With dead ends: 154 [2022-11-22 02:48:48,056 INFO L226 Difference]: Without dead ends: 128 [2022-11-22 02:48:48,057 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 33 SyntacticMatches, 4 SemanticMatches, 43 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 468 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=224, Invalid=1581, Unknown=9, NotChecked=166, Total=1980 [2022-11-22 02:48:48,057 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 69 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 293 mSolverCounterSat, 11 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 118 SdHoareTripleChecker+Invalid, 372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 293 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 65 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:48,058 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 118 Invalid, 372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 293 Invalid, 3 Unknown, 65 Unchecked, 0.3s Time] [2022-11-22 02:48:48,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2022-11-22 02:48:48,061 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 124. [2022-11-22 02:48:48,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 124 states, 121 states have (on average 1.2066115702479339) internal successors, (146), 123 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:48,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 124 states to 124 states and 146 transitions. [2022-11-22 02:48:48,062 INFO L78 Accepts]: Start accepts. Automaton has 124 states and 146 transitions. Word has length 20 [2022-11-22 02:48:48,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:48,063 INFO L495 AbstractCegarLoop]: Abstraction has 124 states and 146 transitions. [2022-11-22 02:48:48,063 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 1.6956521739130435) internal successors, (39), 23 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:48,063 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 146 transitions. [2022-11-22 02:48:48,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-22 02:48:48,064 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:48,064 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:48,072 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-11-22 02:48:48,271 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:48:48,271 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:48,271 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:48,272 INFO L85 PathProgramCache]: Analyzing trace with hash -2062061322, now seen corresponding path program 5 times [2022-11-22 02:48:48,272 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:48,272 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1918548395] [2022-11-22 02:48:48,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:48,272 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:48,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:49,087 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 1 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:49,088 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:49,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1918548395] [2022-11-22 02:48:49,088 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1918548395] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:48:49,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [94489765] [2022-11-22 02:48:49,088 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:48:49,088 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:48:49,089 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:48:49,090 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:48:49,096 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-22 02:48:49,251 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 02:48:49,251 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:48:49,254 INFO L263 TraceCheckSpWp]: Trace formula consists of 179 conjuncts, 38 conjunts are in the unsatisfiable core [2022-11-22 02:48:49,256 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:48:49,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:49,719 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 02:48:49,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 02:48:49,755 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:49,755 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:48:49,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 02:48:49,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 02:48:50,115 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:50,116 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [94489765] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:48:50,116 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [350149753] [2022-11-22 02:48:50,117 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:48:50,117 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:48:50,118 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:48:50,118 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:48:50,118 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:48:50,163 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:50,166 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:50,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:48:50,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:50,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:50,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:50,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:50,526 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:48:50,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:48:50,663 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:48:52,472 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5638#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:48:52,472 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:48:52,472 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:48:52,473 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 31 [2022-11-22 02:48:52,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1081867322] [2022-11-22 02:48:52,473 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:48:52,474 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-22 02:48:52,474 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:48:52,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-22 02:48:52,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=1373, Unknown=0, NotChecked=0, Total=1482 [2022-11-22 02:48:52,476 INFO L87 Difference]: Start difference. First operand 124 states and 146 transitions. Second operand has 31 states, 31 states have (on average 1.7096774193548387) internal successors, (53), 31 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:57,719 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:48:57,720 INFO L93 Difference]: Finished difference Result 285 states and 316 transitions. [2022-11-22 02:48:57,720 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-11-22 02:48:57,720 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 1.7096774193548387) internal successors, (53), 31 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-11-22 02:48:57,721 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:48:57,722 INFO L225 Difference]: With dead ends: 285 [2022-11-22 02:48:57,722 INFO L226 Difference]: Without dead ends: 275 [2022-11-22 02:48:57,724 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 35 SyntacticMatches, 2 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 4 DeprecatedPredicates, 1225 ImplicationChecksByTransitivity, 6.6s TimeCoverageRelationStatistics Valid=582, Invalid=5118, Unknown=0, NotChecked=0, Total=5700 [2022-11-22 02:48:57,725 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 339 mSDsluCounter, 394 mSDsCounter, 0 mSdLazyCounter, 1343 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 339 SdHoareTripleChecker+Valid, 425 SdHoareTripleChecker+Invalid, 1362 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 1343 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:48:57,725 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [339 Valid, 425 Invalid, 1362 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 1343 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-22 02:48:57,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 275 states. [2022-11-22 02:48:57,731 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 275 to 148. [2022-11-22 02:48:57,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 145 states have (on average 1.2137931034482758) internal successors, (176), 147 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:57,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 176 transitions. [2022-11-22 02:48:57,733 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 176 transitions. Word has length 21 [2022-11-22 02:48:57,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:48:57,733 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 176 transitions. [2022-11-22 02:48:57,733 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 1.7096774193548387) internal successors, (53), 31 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:48:57,734 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 176 transitions. [2022-11-22 02:48:57,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-22 02:48:57,734 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:48:57,735 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:48:57,746 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-22 02:48:57,941 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-11-22 02:48:57,942 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:48:57,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:48:57,942 INFO L85 PathProgramCache]: Analyzing trace with hash -333846590, now seen corresponding path program 3 times [2022-11-22 02:48:57,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:48:57,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1555405300] [2022-11-22 02:48:57,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:48:57,943 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:48:57,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:48:58,276 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:58,276 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:48:58,276 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1555405300] [2022-11-22 02:48:58,277 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1555405300] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:48:58,277 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1560759712] [2022-11-22 02:48:58,277 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:48:58,277 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:48:58,277 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:48:58,284 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:48:58,321 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-22 02:48:58,474 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:48:58,474 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:48:58,476 INFO L263 TraceCheckSpWp]: Trace formula consists of 208 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-22 02:48:58,478 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:48:58,652 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:58,653 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:48:58,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:48:58,956 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:48:58,956 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1560759712] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:48:58,957 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1012004282] [2022-11-22 02:48:58,958 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:48:58,958 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:48:58,959 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:48:58,959 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:48:58,959 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:48:59,005 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:59,008 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:48:59,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:48:59,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:59,166 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:59,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:59,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:48:59,339 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:48:59,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:48:59,492 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:48:59,493 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:48:59,540 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:48:59,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:48:59,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:48:59,893 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:00,002 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:49:03,243 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6303#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:49:03,243 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:49:03,243 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:49:03,243 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-11-22 02:49:03,243 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [898308462] [2022-11-22 02:49:03,243 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:49:03,244 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-22 02:49:03,244 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:49:03,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-22 02:49:03,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=140, Invalid=1120, Unknown=0, NotChecked=0, Total=1260 [2022-11-22 02:49:03,245 INFO L87 Difference]: Start difference. First operand 148 states and 176 transitions. Second operand has 23 states, 22 states have (on average 2.227272727272727) internal successors, (49), 23 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:03,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:49:03,917 INFO L93 Difference]: Finished difference Result 160 states and 184 transitions. [2022-11-22 02:49:03,918 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-22 02:49:03,918 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 2.227272727272727) internal successors, (49), 23 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-22 02:49:03,918 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:49:03,919 INFO L225 Difference]: With dead ends: 160 [2022-11-22 02:49:03,919 INFO L226 Difference]: Without dead ends: 160 [2022-11-22 02:49:03,920 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 37 SyntacticMatches, 3 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 423 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=282, Invalid=1788, Unknown=0, NotChecked=0, Total=2070 [2022-11-22 02:49:03,921 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 169 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 465 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 474 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 465 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:49:03,921 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 95 Invalid, 474 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 465 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:49:03,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-11-22 02:49:03,925 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 153. [2022-11-22 02:49:03,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 150 states have (on average 1.2066666666666668) internal successors, (181), 152 states have internal predecessors, (181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:03,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 181 transitions. [2022-11-22 02:49:03,927 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 181 transitions. Word has length 22 [2022-11-22 02:49:03,927 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:49:03,928 INFO L495 AbstractCegarLoop]: Abstraction has 153 states and 181 transitions. [2022-11-22 02:49:03,928 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 2.227272727272727) internal successors, (49), 23 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:03,928 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 181 transitions. [2022-11-22 02:49:03,929 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-22 02:49:03,929 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:49:03,929 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:49:03,943 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-22 02:49:04,137 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32,18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:49:04,137 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:49:04,138 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:49:04,138 INFO L85 PathProgramCache]: Analyzing trace with hash -740843159, now seen corresponding path program 1 times [2022-11-22 02:49:04,138 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:49:04,138 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [637271121] [2022-11-22 02:49:04,138 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:49:04,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:49:04,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:49:04,517 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:49:04,517 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:49:04,517 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [637271121] [2022-11-22 02:49:04,517 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [637271121] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:49:04,517 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [394371530] [2022-11-22 02:49:04,517 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:49:04,518 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:49:04,518 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:49:04,519 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:49:04,527 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-22 02:49:04,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:49:04,696 INFO L263 TraceCheckSpWp]: Trace formula consists of 205 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-22 02:49:04,706 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:49:04,721 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:49:04,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:49:04,901 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 9 proven. 23 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:49:04,902 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:49:05,286 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 9 proven. 23 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:49:05,286 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [394371530] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:49:05,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [155322010] [2022-11-22 02:49:05,288 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 02:49:05,288 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:49:05,289 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:49:05,289 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:49:05,289 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:49:05,338 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:05,341 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:05,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:49:05,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:05,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:05,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:05,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:05,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:05,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:05,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:05,745 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:49:05,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:49:06,105 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:49:08,565 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6824#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:49:08,566 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:49:08,566 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:49:08,566 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 30 [2022-11-22 02:49:08,566 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1892085757] [2022-11-22 02:49:08,566 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:49:08,567 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-22 02:49:08,567 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:49:08,567 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-22 02:49:08,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=201, Invalid=1439, Unknown=0, NotChecked=0, Total=1640 [2022-11-22 02:49:08,569 INFO L87 Difference]: Start difference. First operand 153 states and 181 transitions. Second operand has 31 states, 30 states have (on average 2.1) internal successors, (63), 31 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:09,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:49:09,452 INFO L93 Difference]: Finished difference Result 329 states and 364 transitions. [2022-11-22 02:49:09,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-22 02:49:09,452 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 2.1) internal successors, (63), 31 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-22 02:49:09,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:49:09,454 INFO L225 Difference]: With dead ends: 329 [2022-11-22 02:49:09,454 INFO L226 Difference]: Without dead ends: 329 [2022-11-22 02:49:09,455 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 711 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=419, Invalid=2233, Unknown=0, NotChecked=0, Total=2652 [2022-11-22 02:49:09,456 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 226 mSDsluCounter, 219 mSDsCounter, 0 mSdLazyCounter, 782 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 259 SdHoareTripleChecker+Invalid, 802 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 782 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 02:49:09,456 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [226 Valid, 259 Invalid, 802 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 782 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-22 02:49:09,457 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2022-11-22 02:49:09,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 157. [2022-11-22 02:49:09,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 154 states have (on average 1.2142857142857142) internal successors, (187), 156 states have internal predecessors, (187), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:09,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 187 transitions. [2022-11-22 02:49:09,463 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 187 transitions. Word has length 25 [2022-11-22 02:49:09,463 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:49:09,463 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 187 transitions. [2022-11-22 02:49:09,463 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 2.1) internal successors, (63), 31 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:09,464 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 187 transitions. [2022-11-22 02:49:09,464 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-22 02:49:09,464 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:49:09,465 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:49:09,476 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-22 02:49:09,671 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:49:09,671 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:49:09,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:49:09,671 INFO L85 PathProgramCache]: Analyzing trace with hash -1072925247, now seen corresponding path program 1 times [2022-11-22 02:49:09,672 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:49:09,672 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1719014432] [2022-11-22 02:49:09,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:49:09,672 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:49:09,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:49:10,266 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 14 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:10,266 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:49:10,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1719014432] [2022-11-22 02:49:10,266 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1719014432] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:49:10,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [631155148] [2022-11-22 02:49:10,266 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:49:10,267 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:49:10,267 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:49:10,268 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:49:10,272 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-22 02:49:10,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:49:10,402 INFO L263 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-22 02:49:10,404 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:49:10,495 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:49:10,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:49:10,941 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 1 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:10,942 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:49:11,526 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:11,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [631155148] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:49:11,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [106230714] [2022-11-22 02:49:11,528 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:49:11,528 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:49:11,529 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:49:11,529 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:49:11,529 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:49:11,597 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:11,600 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:11,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:49:11,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:11,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:11,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:11,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:11,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:11,893 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:11,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:11,989 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:49:11,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:49:12,265 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:49:12,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:49:12,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:12,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:12,726 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:49:16,766 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7523#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:49:16,766 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:49:16,766 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:49:16,766 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 35 [2022-11-22 02:49:16,767 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1433366372] [2022-11-22 02:49:16,767 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:49:16,767 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-11-22 02:49:16,767 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:49:16,768 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-11-22 02:49:16,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=2310, Unknown=0, NotChecked=0, Total=2550 [2022-11-22 02:49:16,769 INFO L87 Difference]: Start difference. First operand 157 states and 187 transitions. Second operand has 37 states, 36 states have (on average 2.0833333333333335) internal successors, (75), 36 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:21,161 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:49:21,161 INFO L93 Difference]: Finished difference Result 255 states and 282 transitions. [2022-11-22 02:49:21,161 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-11-22 02:49:21,162 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 36 states have (on average 2.0833333333333335) internal successors, (75), 36 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-22 02:49:21,162 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:49:21,163 INFO L225 Difference]: With dead ends: 255 [2022-11-22 02:49:21,163 INFO L226 Difference]: Without dead ends: 223 [2022-11-22 02:49:21,165 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 35 SyntacticMatches, 1 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1667 ImplicationChecksByTransitivity, 8.6s TimeCoverageRelationStatistics Valid=1023, Invalid=6287, Unknown=0, NotChecked=0, Total=7310 [2022-11-22 02:49:21,165 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 828 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 883 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 828 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 925 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 883 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-22 02:49:21,166 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [828 Valid, 130 Invalid, 925 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 883 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-22 02:49:21,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-11-22 02:49:21,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 165. [2022-11-22 02:49:21,170 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 165 states, 162 states have (on average 1.1790123456790123) internal successors, (191), 164 states have internal predecessors, (191), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:21,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 165 states to 165 states and 191 transitions. [2022-11-22 02:49:21,172 INFO L78 Accepts]: Start accepts. Automaton has 165 states and 191 transitions. Word has length 25 [2022-11-22 02:49:21,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:49:21,172 INFO L495 AbstractCegarLoop]: Abstraction has 165 states and 191 transitions. [2022-11-22 02:49:21,172 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 36 states have (on average 2.0833333333333335) internal successors, (75), 36 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:21,173 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 191 transitions. [2022-11-22 02:49:21,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-22 02:49:21,173 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:49:21,173 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:49:21,192 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-22 02:49:21,383 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable34,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:49:21,384 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:49:21,384 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:49:21,384 INFO L85 PathProgramCache]: Analyzing trace with hash 1180949197, now seen corresponding path program 6 times [2022-11-22 02:49:21,384 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:49:21,384 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [836274690] [2022-11-22 02:49:21,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:49:21,385 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:49:21,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:49:22,293 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 4 proven. 37 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:22,293 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:49:22,293 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [836274690] [2022-11-22 02:49:22,293 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [836274690] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:49:22,293 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1881165282] [2022-11-22 02:49:22,293 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:49:22,293 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:49:22,294 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:49:22,295 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:49:22,297 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-22 02:49:22,447 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:49:22,447 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:49:22,450 INFO L263 TraceCheckSpWp]: Trace formula consists of 203 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-22 02:49:22,452 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:49:22,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:23,068 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 02:49:23,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 02:49:23,104 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:23,104 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:49:23,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 02:49:23,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 02:49:23,533 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:23,533 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1881165282] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:49:23,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [748351380] [2022-11-22 02:49:23,535 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:49:23,536 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:49:23,536 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:49:23,536 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:49:23,537 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:49:23,585 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:23,591 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:23,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:49:23,657 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:23,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:23,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:23,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:23,924 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:49:23,924 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:49:24,043 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:49:25,869 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8207#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:49:25,869 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:49:25,870 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:49:25,870 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 36 [2022-11-22 02:49:25,870 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [997296395] [2022-11-22 02:49:25,870 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:49:25,871 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-22 02:49:25,871 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:49:25,871 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-22 02:49:25,872 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=1769, Unknown=0, NotChecked=0, Total=1892 [2022-11-22 02:49:25,872 INFO L87 Difference]: Start difference. First operand 165 states and 191 transitions. Second operand has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:31,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:49:31,836 INFO L93 Difference]: Finished difference Result 437 states and 477 transitions. [2022-11-22 02:49:31,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-11-22 02:49:31,836 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-22 02:49:31,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:49:31,838 INFO L225 Difference]: With dead ends: 437 [2022-11-22 02:49:31,838 INFO L226 Difference]: Without dead ends: 425 [2022-11-22 02:49:31,841 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 44 SyntacticMatches, 2 SemanticMatches, 86 ConstructedPredicates, 0 IntricatePredicates, 5 DeprecatedPredicates, 1711 ImplicationChecksByTransitivity, 7.5s TimeCoverageRelationStatistics Valid=700, Invalid=6956, Unknown=0, NotChecked=0, Total=7656 [2022-11-22 02:49:31,841 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 431 mSDsluCounter, 513 mSDsCounter, 0 mSdLazyCounter, 1795 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 431 SdHoareTripleChecker+Valid, 553 SdHoareTripleChecker+Invalid, 1818 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 1795 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-22 02:49:31,842 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [431 Valid, 553 Invalid, 1818 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 1795 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-22 02:49:31,843 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425 states. [2022-11-22 02:49:31,848 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425 to 197. [2022-11-22 02:49:31,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 194 states have (on average 1.1804123711340206) internal successors, (229), 196 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:31,849 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 229 transitions. [2022-11-22 02:49:31,850 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 229 transitions. Word has length 25 [2022-11-22 02:49:31,850 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:49:31,850 INFO L495 AbstractCegarLoop]: Abstraction has 197 states and 229 transitions. [2022-11-22 02:49:31,850 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:31,851 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 229 transitions. [2022-11-22 02:49:31,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-22 02:49:31,851 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:49:31,851 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:49:31,858 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-22 02:49:32,058 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-22 02:49:32,059 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:49:32,059 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:49:32,059 INFO L85 PathProgramCache]: Analyzing trace with hash -108339126, now seen corresponding path program 4 times [2022-11-22 02:49:32,059 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:49:32,059 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [909264631] [2022-11-22 02:49:32,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:49:32,059 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:49:32,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:49:32,806 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:32,806 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:49:32,806 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [909264631] [2022-11-22 02:49:32,807 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [909264631] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:49:32,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1362649513] [2022-11-22 02:49:32,807 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:49:32,807 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:49:32,807 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:49:32,809 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:49:32,839 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-22 02:49:32,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:49:32,992 INFO L263 TraceCheckSpWp]: Trace formula consists of 239 conjuncts, 81 conjunts are in the unsatisfiable core [2022-11-22 02:49:32,995 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:49:33,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:33,297 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:49:33,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-11-22 02:49:33,306 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 02:49:33,837 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-22 02:49:33,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 43 treesize of output 53 [2022-11-22 02:49:33,872 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:49:33,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 7 [2022-11-22 02:49:34,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-11-22 02:49:34,376 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:34,377 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:49:34,382 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:49:34,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-11-22 02:49:34,390 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:34,390 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:49:34,408 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_706 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_706) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-22 02:49:34,418 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_706 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_706) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-22 02:49:35,066 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:49:35,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 34 [2022-11-22 02:49:35,091 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:49:35,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 58 treesize of output 57 [2022-11-22 02:49:35,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 02:49:35,121 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:49:35,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 20 [2022-11-22 02:49:35,674 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 10 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 6 not checked. [2022-11-22 02:49:35,674 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1362649513] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:49:35,675 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1478269564] [2022-11-22 02:49:35,676 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:49:35,676 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:49:35,677 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:49:35,677 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:49:35,677 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:49:35,719 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:35,722 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:35,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:49:35,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:35,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:35,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:35,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:35,965 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:49:35,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:49:36,081 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:49:36,084 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:49:36,123 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:49:36,124 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:49:36,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:36,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:36,457 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:49:40,621 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9135#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:49:40,622 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:49:40,622 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:49:40,622 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 19] total 47 [2022-11-22 02:49:40,622 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1359503545] [2022-11-22 02:49:40,622 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:49:40,623 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-11-22 02:49:40,623 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:49:40,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-11-22 02:49:40,624 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=230, Invalid=3066, Unknown=18, NotChecked=226, Total=3540 [2022-11-22 02:49:40,625 INFO L87 Difference]: Start difference. First operand 197 states and 229 transitions. Second operand has 47 states, 47 states have (on average 1.3829787234042554) internal successors, (65), 47 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:44,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:49:44,126 INFO L93 Difference]: Finished difference Result 344 states and 392 transitions. [2022-11-22 02:49:44,126 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-22 02:49:44,126 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 1.3829787234042554) internal successors, (65), 47 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-11-22 02:49:44,127 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:49:44,128 INFO L225 Difference]: With dead ends: 344 [2022-11-22 02:49:44,128 INFO L226 Difference]: Without dead ends: 270 [2022-11-22 02:49:44,129 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 37 SyntacticMatches, 1 SemanticMatches, 80 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 1369 ImplicationChecksByTransitivity, 8.5s TimeCoverageRelationStatistics Valid=573, Invalid=5734, Unknown=21, NotChecked=314, Total=6642 [2022-11-22 02:49:44,130 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 211 mSDsluCounter, 307 mSDsCounter, 0 mSdLazyCounter, 1102 mSolverCounterSat, 30 mSolverCounterUnsat, 26 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 211 SdHoareTripleChecker+Valid, 325 SdHoareTripleChecker+Invalid, 1278 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 1102 IncrementalHoareTripleChecker+Invalid, 26 IncrementalHoareTripleChecker+Unknown, 120 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:49:44,130 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [211 Valid, 325 Invalid, 1278 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 1102 Invalid, 26 Unknown, 120 Unchecked, 1.1s Time] [2022-11-22 02:49:44,131 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2022-11-22 02:49:44,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 256. [2022-11-22 02:49:44,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 256 states, 253 states have (on average 1.173913043478261) internal successors, (297), 255 states have internal predecessors, (297), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:44,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 297 transitions. [2022-11-22 02:49:44,138 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 297 transitions. Word has length 26 [2022-11-22 02:49:44,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:49:44,138 INFO L495 AbstractCegarLoop]: Abstraction has 256 states and 297 transitions. [2022-11-22 02:49:44,138 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 1.3829787234042554) internal successors, (65), 47 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:44,139 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 297 transitions. [2022-11-22 02:49:44,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-22 02:49:44,139 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:49:44,140 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:49:44,146 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-22 02:49:44,346 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-22 02:49:44,346 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:49:44,346 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:49:44,347 INFO L85 PathProgramCache]: Analyzing trace with hash -979590216, now seen corresponding path program 5 times [2022-11-22 02:49:44,347 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:49:44,347 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1987062047] [2022-11-22 02:49:44,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:49:44,347 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:49:44,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:49:44,791 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:44,792 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:49:44,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1987062047] [2022-11-22 02:49:44,792 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1987062047] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:49:44,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [639138250] [2022-11-22 02:49:44,792 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:49:44,792 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:49:44,792 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:49:44,793 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:49:44,796 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-22 02:49:45,036 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-22 02:49:45,036 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:49:45,039 INFO L263 TraceCheckSpWp]: Trace formula consists of 252 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-22 02:49:45,045 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:49:45,059 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:49:45,060 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:49:45,330 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:45,331 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:49:45,799 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:45,799 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [639138250] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:49:45,799 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [5220549] [2022-11-22 02:49:45,800 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:49:45,800 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:49:45,800 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:49:45,801 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:49:45,801 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:49:45,851 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:45,856 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:45,857 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:49:45,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:45,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:45,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:46,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:46,107 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:49:46,107 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:49:46,217 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:49:46,218 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:49:46,256 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:49:46,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:49:46,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:46,568 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:46,692 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:49:49,979 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9992#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:49:49,979 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:49:49,980 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:49:49,980 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 34 [2022-11-22 02:49:49,980 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [991283870] [2022-11-22 02:49:49,980 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:49:49,980 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-22 02:49:49,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:49:49,981 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-22 02:49:49,981 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=234, Invalid=2022, Unknown=0, NotChecked=0, Total=2256 [2022-11-22 02:49:49,981 INFO L87 Difference]: Start difference. First operand 256 states and 297 transitions. Second operand has 35 states, 34 states have (on average 2.411764705882353) internal successors, (82), 35 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:50,762 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:49:50,763 INFO L93 Difference]: Finished difference Result 283 states and 317 transitions. [2022-11-22 02:49:50,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-22 02:49:50,768 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.411764705882353) internal successors, (82), 35 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-22 02:49:50,768 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:49:50,769 INFO L225 Difference]: With dead ends: 283 [2022-11-22 02:49:50,769 INFO L226 Difference]: Without dead ends: 283 [2022-11-22 02:49:50,770 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 107 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 883 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=521, Invalid=3139, Unknown=0, NotChecked=0, Total=3660 [2022-11-22 02:49:50,771 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 350 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 524 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 543 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 524 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:49:50,771 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 110 Invalid, 543 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 524 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:49:50,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283 states. [2022-11-22 02:49:50,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283 to 265. [2022-11-22 02:49:50,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 262 states have (on average 1.16793893129771) internal successors, (306), 264 states have internal predecessors, (306), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:50,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 306 transitions. [2022-11-22 02:49:50,780 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 306 transitions. Word has length 28 [2022-11-22 02:49:50,780 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:49:50,780 INFO L495 AbstractCegarLoop]: Abstraction has 265 states and 306 transitions. [2022-11-22 02:49:50,780 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.411764705882353) internal successors, (82), 35 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:49:50,781 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 306 transitions. [2022-11-22 02:49:50,781 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-22 02:49:50,782 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:49:50,782 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:49:50,791 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-22 02:49:50,992 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-22 02:49:50,992 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:49:50,992 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:49:50,992 INFO L85 PathProgramCache]: Analyzing trace with hash -302525593, now seen corresponding path program 2 times [2022-11-22 02:49:50,992 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:49:50,993 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [6367026] [2022-11-22 02:49:50,993 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:49:50,993 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:49:51,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:49:51,682 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 1 proven. 29 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:51,683 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:49:51,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [6367026] [2022-11-22 02:49:51,683 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [6367026] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:49:51,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [62841187] [2022-11-22 02:49:51,683 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:49:51,684 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:49:51,684 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:49:51,687 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:49:51,690 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-22 02:49:52,065 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-22 02:49:52,065 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:49:52,068 INFO L263 TraceCheckSpWp]: Trace formula consists of 258 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-22 02:49:52,072 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:49:52,129 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 02:49:52,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 02:49:53,168 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 3 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:53,168 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:49:53,974 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 9 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:49:53,974 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [62841187] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:49:53,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [867556518] [2022-11-22 02:49:53,976 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:49:53,976 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:49:53,977 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:49:53,977 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:49:53,977 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:49:54,026 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:54,028 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:49:54,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:49:54,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:54,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:54,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:54,206 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:49:54,250 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:49:54,250 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:49:54,368 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:49:54,371 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:49:54,415 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:49:54,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:49:54,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:54,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:49:54,728 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:49:58,075 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10784#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:49:58,075 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:49:58,075 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:49:58,075 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 11] total 35 [2022-11-22 02:49:58,076 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [306814544] [2022-11-22 02:49:58,076 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:49:58,076 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-11-22 02:49:58,076 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:49:58,077 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-11-22 02:49:58,077 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=253, Invalid=2197, Unknown=0, NotChecked=0, Total=2450 [2022-11-22 02:49:58,077 INFO L87 Difference]: Start difference. First operand 265 states and 306 transitions. Second operand has 37 states, 36 states have (on average 2.4166666666666665) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:03,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:50:03,014 INFO L93 Difference]: Finished difference Result 332 states and 369 transitions. [2022-11-22 02:50:03,014 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-22 02:50:03,014 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 36 states have (on average 2.4166666666666665) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-22 02:50:03,015 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:50:03,016 INFO L225 Difference]: With dead ends: 332 [2022-11-22 02:50:03,016 INFO L226 Difference]: Without dead ends: 332 [2022-11-22 02:50:03,017 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 48 SyntacticMatches, 1 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1306 ImplicationChecksByTransitivity, 8.7s TimeCoverageRelationStatistics Valid=895, Invalid=5267, Unknown=0, NotChecked=0, Total=6162 [2022-11-22 02:50:03,018 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 794 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 985 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 794 SdHoareTripleChecker+Valid, 99 SdHoareTripleChecker+Invalid, 1043 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 985 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-22 02:50:03,018 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [794 Valid, 99 Invalid, 1043 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 985 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-22 02:50:03,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 332 states. [2022-11-22 02:50:03,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 332 to 271. [2022-11-22 02:50:03,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 268 states have (on average 1.1679104477611941) internal successors, (313), 270 states have internal predecessors, (313), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:03,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 313 transitions. [2022-11-22 02:50:03,025 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 313 transitions. Word has length 29 [2022-11-22 02:50:03,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:50:03,026 INFO L495 AbstractCegarLoop]: Abstraction has 271 states and 313 transitions. [2022-11-22 02:50:03,026 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 36 states have (on average 2.4166666666666665) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:03,026 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 313 transitions. [2022-11-22 02:50:03,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-22 02:50:03,027 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:50:03,027 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:50:03,040 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-22 02:50:03,234 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-22 02:50:03,235 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:50:03,235 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:50:03,235 INFO L85 PathProgramCache]: Analyzing trace with hash -538928704, now seen corresponding path program 2 times [2022-11-22 02:50:03,236 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:50:03,236 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [196438888] [2022-11-22 02:50:03,236 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:50:03,236 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:50:03,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:50:03,699 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:50:03,700 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:50:03,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [196438888] [2022-11-22 02:50:03,700 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [196438888] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:50:03,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [645083842] [2022-11-22 02:50:03,700 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:50:03,700 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:50:03,701 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:50:03,703 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:50:03,714 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-22 02:50:03,923 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-22 02:50:03,923 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:50:03,925 INFO L263 TraceCheckSpWp]: Trace formula consists of 229 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-22 02:50:03,927 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:50:04,187 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 16 proven. 34 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:50:04,188 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:50:04,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-22 02:50:04,542 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 16 proven. 34 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:50:04,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [645083842] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:50:04,543 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [468777112] [2022-11-22 02:50:04,547 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 02:50:04,548 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:50:04,548 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:50:04,548 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:50:04,549 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:50:04,600 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:50:04,603 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:50:04,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:50:04,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:04,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:04,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:04,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:04,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:04,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:04,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:05,018 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:50:05,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:50:05,274 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:50:07,674 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11661#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:50:07,674 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:50:07,674 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:50:07,675 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 34 [2022-11-22 02:50:07,675 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [525546717] [2022-11-22 02:50:07,675 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:50:07,675 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-22 02:50:07,675 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:50:07,676 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-22 02:50:07,676 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=252, Invalid=1728, Unknown=0, NotChecked=0, Total=1980 [2022-11-22 02:50:07,677 INFO L87 Difference]: Start difference. First operand 271 states and 313 transitions. Second operand has 35 states, 34 states have (on average 2.0294117647058822) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:08,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:50:08,601 INFO L93 Difference]: Finished difference Result 588 states and 644 transitions. [2022-11-22 02:50:08,601 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-22 02:50:08,601 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.0294117647058822) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-22 02:50:08,602 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:50:08,604 INFO L225 Difference]: With dead ends: 588 [2022-11-22 02:50:08,604 INFO L226 Difference]: Without dead ends: 588 [2022-11-22 02:50:08,605 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 50 SyntacticMatches, 6 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1094 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=515, Invalid=2791, Unknown=0, NotChecked=0, Total=3306 [2022-11-22 02:50:08,605 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 298 mSDsluCounter, 313 mSDsCounter, 0 mSdLazyCounter, 1032 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 298 SdHoareTripleChecker+Valid, 361 SdHoareTripleChecker+Invalid, 1058 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 1032 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 02:50:08,606 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [298 Valid, 361 Invalid, 1058 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 1032 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-22 02:50:08,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 588 states. [2022-11-22 02:50:08,614 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 588 to 277. [2022-11-22 02:50:08,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 277 states, 274 states have (on average 1.1751824817518248) internal successors, (322), 276 states have internal predecessors, (322), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:08,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 277 states to 277 states and 322 transitions. [2022-11-22 02:50:08,616 INFO L78 Accepts]: Start accepts. Automaton has 277 states and 322 transitions. Word has length 29 [2022-11-22 02:50:08,616 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:50:08,616 INFO L495 AbstractCegarLoop]: Abstraction has 277 states and 322 transitions. [2022-11-22 02:50:08,616 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.0294117647058822) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:08,617 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 322 transitions. [2022-11-22 02:50:08,617 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-22 02:50:08,617 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:50:08,618 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:50:08,624 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-22 02:50:08,824 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-22 02:50:08,824 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:50:08,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:50:08,825 INFO L85 PathProgramCache]: Analyzing trace with hash -1560554908, now seen corresponding path program 7 times [2022-11-22 02:50:08,825 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:50:08,825 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [234029809] [2022-11-22 02:50:08,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:50:08,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:50:08,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:50:09,834 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 9 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:50:09,834 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:50:09,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [234029809] [2022-11-22 02:50:09,834 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [234029809] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:50:09,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1707083441] [2022-11-22 02:50:09,835 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:50:09,835 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:50:09,835 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:50:09,836 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:50:09,839 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-22 02:50:09,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:50:09,988 INFO L263 TraceCheckSpWp]: Trace formula consists of 227 conjuncts, 50 conjunts are in the unsatisfiable core [2022-11-22 02:50:09,989 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:50:10,230 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:10,738 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 02:50:10,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 02:50:10,788 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 6 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:50:10,788 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:50:11,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 02:50:11,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 02:50:11,306 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 6 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:50:11,307 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1707083441] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:50:11,307 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2038052467] [2022-11-22 02:50:11,308 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:50:11,308 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:50:11,308 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:50:11,309 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:50:11,309 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:50:11,352 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:50:11,355 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:50:11,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:50:11,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:11,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:11,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:11,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:11,609 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:50:11,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:50:11,717 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:50:13,427 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12771#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:50:13,427 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:50:13,427 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:50:13,428 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 17, 17] total 41 [2022-11-22 02:50:13,428 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1070411223] [2022-11-22 02:50:13,428 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:50:13,428 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-11-22 02:50:13,428 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:50:13,428 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-11-22 02:50:13,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=137, Invalid=2215, Unknown=0, NotChecked=0, Total=2352 [2022-11-22 02:50:13,429 INFO L87 Difference]: Start difference. First operand 277 states and 322 transitions. Second operand has 41 states, 41 states have (on average 1.7804878048780488) internal successors, (73), 41 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:20,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:50:20,989 INFO L93 Difference]: Finished difference Result 729 states and 797 transitions. [2022-11-22 02:50:20,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2022-11-22 02:50:20,989 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 41 states have (on average 1.7804878048780488) internal successors, (73), 41 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-22 02:50:20,989 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:50:20,992 INFO L225 Difference]: With dead ends: 729 [2022-11-22 02:50:20,992 INFO L226 Difference]: Without dead ends: 715 [2022-11-22 02:50:20,993 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 53 SyntacticMatches, 2 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 6 DeprecatedPredicates, 2213 ImplicationChecksByTransitivity, 8.8s TimeCoverageRelationStatistics Valid=824, Invalid=9076, Unknown=0, NotChecked=0, Total=9900 [2022-11-22 02:50:20,994 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 523 mSDsluCounter, 742 mSDsCounter, 0 mSdLazyCounter, 2368 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 523 SdHoareTripleChecker+Valid, 791 SdHoareTripleChecker+Invalid, 2395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 2368 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-22 02:50:20,994 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [523 Valid, 791 Invalid, 2395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 2368 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-11-22 02:50:20,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 715 states. [2022-11-22 02:50:21,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 715 to 323. [2022-11-22 02:50:21,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 323 states, 320 states have (on average 1.184375) internal successors, (379), 322 states have internal predecessors, (379), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:21,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 323 states to 323 states and 379 transitions. [2022-11-22 02:50:21,006 INFO L78 Accepts]: Start accepts. Automaton has 323 states and 379 transitions. Word has length 29 [2022-11-22 02:50:21,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:50:21,006 INFO L495 AbstractCegarLoop]: Abstraction has 323 states and 379 transitions. [2022-11-22 02:50:21,006 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 41 states have (on average 1.7804878048780488) internal successors, (73), 41 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:21,006 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 379 transitions. [2022-11-22 02:50:21,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-22 02:50:21,007 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:50:21,008 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:50:21,014 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-22 02:50:21,214 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable40 [2022-11-22 02:50:21,214 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:50:21,215 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:50:21,215 INFO L85 PathProgramCache]: Analyzing trace with hash -1698516672, now seen corresponding path program 6 times [2022-11-22 02:50:21,215 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:50:21,215 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1540662082] [2022-11-22 02:50:21,215 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:50:21,216 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:50:21,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:50:22,174 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:50:22,174 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:50:22,174 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1540662082] [2022-11-22 02:50:22,174 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1540662082] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:50:22,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [76742763] [2022-11-22 02:50:22,175 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:50:22,175 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:50:22,175 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:50:22,180 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:50:22,208 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-22 02:50:22,386 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:50:22,386 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:50:22,390 INFO L263 TraceCheckSpWp]: Trace formula consists of 283 conjuncts, 78 conjunts are in the unsatisfiable core [2022-11-22 02:50:22,392 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:50:22,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:50:22,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:22,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:50:22,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:50:22,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:50:22,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 02:50:23,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 02:50:23,009 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:50:23,010 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:50:23,024 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_929 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_929) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-22 02:50:23,033 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_929 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_929) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-22 02:50:23,043 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_928 (Array Int Int)) (v_ArrVal_929 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_928) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_929) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-22 02:50:31,273 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_929 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_929) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)))) is different from false [2022-11-22 02:50:31,286 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_929 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_929) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-22 02:50:31,306 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:50:31,306 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:50:31,314 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:50:31,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:50:31,543 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 18 not checked. [2022-11-22 02:50:31,544 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [76742763] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:50:31,544 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1761057383] [2022-11-22 02:50:31,545 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:50:31,546 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:50:31,546 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:50:31,546 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:50:31,547 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:50:31,583 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:50:31,588 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:50:31,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:50:31,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:31,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:31,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:31,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:31,826 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:50:31,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:50:31,949 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:50:31,950 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:50:31,998 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:50:31,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:50:32,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:50:32,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:50:32,385 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:50:36,429 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14160#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:50:36,429 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:50:36,429 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:50:36,430 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 18, 18] total 40 [2022-11-22 02:50:36,430 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1514678733] [2022-11-22 02:50:36,430 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:50:36,430 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-11-22 02:50:36,430 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:50:36,430 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-11-22 02:50:36,431 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=176, Invalid=2066, Unknown=34, NotChecked=480, Total=2756 [2022-11-22 02:50:36,431 INFO L87 Difference]: Start difference. First operand 323 states and 379 transitions. Second operand has 40 states, 40 states have (on average 1.775) internal successors, (71), 40 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:38,683 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:50:38,683 INFO L93 Difference]: Finished difference Result 488 states and 569 transitions. [2022-11-22 02:50:38,683 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-22 02:50:38,683 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 1.775) internal successors, (71), 40 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-11-22 02:50:38,684 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:50:38,686 INFO L225 Difference]: With dead ends: 488 [2022-11-22 02:50:38,686 INFO L226 Difference]: Without dead ends: 468 [2022-11-22 02:50:38,687 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 135 GetRequests, 64 SyntacticMatches, 4 SemanticMatches, 67 ConstructedPredicates, 5 IntricatePredicates, 1 DeprecatedPredicates, 924 ImplicationChecksByTransitivity, 14.4s TimeCoverageRelationStatistics Valid=360, Invalid=3658, Unknown=34, NotChecked=640, Total=4692 [2022-11-22 02:50:38,688 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 148 mSDsluCounter, 375 mSDsCounter, 0 mSdLazyCounter, 950 mSolverCounterSat, 17 mSolverCounterUnsat, 20 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 406 SdHoareTripleChecker+Invalid, 1262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 950 IncrementalHoareTripleChecker+Invalid, 20 IncrementalHoareTripleChecker+Unknown, 275 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:50:38,688 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 406 Invalid, 1262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 950 Invalid, 20 Unknown, 275 Unchecked, 1.0s Time] [2022-11-22 02:50:38,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 468 states. [2022-11-22 02:50:38,696 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 468 to 362. [2022-11-22 02:50:38,696 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 362 states, 359 states have (on average 1.1838440111420614) internal successors, (425), 361 states have internal predecessors, (425), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:38,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 362 states to 362 states and 425 transitions. [2022-11-22 02:50:38,698 INFO L78 Accepts]: Start accepts. Automaton has 362 states and 425 transitions. Word has length 32 [2022-11-22 02:50:38,698 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:50:38,698 INFO L495 AbstractCegarLoop]: Abstraction has 362 states and 425 transitions. [2022-11-22 02:50:38,699 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 40 states have (on average 1.775) internal successors, (71), 40 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:38,699 INFO L276 IsEmpty]: Start isEmpty. Operand 362 states and 425 transitions. [2022-11-22 02:50:38,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-22 02:50:38,700 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:50:38,700 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:50:38,712 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-22 02:50:38,907 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:50:38,907 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:50:38,908 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:50:38,908 INFO L85 PathProgramCache]: Analyzing trace with hash -1588994089, now seen corresponding path program 3 times [2022-11-22 02:50:38,908 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:50:38,908 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1149369139] [2022-11-22 02:50:38,908 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:50:38,908 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:50:38,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:50:39,453 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 56 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:50:39,453 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:50:39,455 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1149369139] [2022-11-22 02:50:39,455 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1149369139] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:50:39,455 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [639317385] [2022-11-22 02:50:39,455 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:50:39,455 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:50:39,455 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:50:39,456 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:50:39,460 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-22 02:50:39,633 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:50:39,634 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:50:39,637 INFO L263 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 43 conjunts are in the unsatisfiable core [2022-11-22 02:50:39,639 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:50:39,655 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:50:39,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:50:39,934 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 25 proven. 47 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:50:39,934 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:50:40,558 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 25 proven. 47 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:50:40,558 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [639317385] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:50:40,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1083231476] [2022-11-22 02:50:40,560 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 02:50:40,560 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:50:40,560 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:50:40,561 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:50:40,561 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:50:40,608 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:50:40,613 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:50:40,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:50:40,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:40,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:40,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:40,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:50:40,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:40,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:40,922 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:40,968 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:50:40,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:50:41,220 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:50:44,243 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15292#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:50:44,244 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:50:44,244 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:50:44,244 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 40 [2022-11-22 02:50:44,244 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1774839203] [2022-11-22 02:50:44,244 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:50:44,244 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-11-22 02:50:44,245 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:50:44,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-11-22 02:50:44,246 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=296, Invalid=2254, Unknown=0, NotChecked=0, Total=2550 [2022-11-22 02:50:44,246 INFO L87 Difference]: Start difference. First operand 362 states and 425 transitions. Second operand has 41 states, 40 states have (on average 2.075) internal successors, (83), 41 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:46,068 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:50:46,068 INFO L93 Difference]: Finished difference Result 809 states and 893 transitions. [2022-11-22 02:50:46,069 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-22 02:50:46,069 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 40 states have (on average 2.075) internal successors, (83), 41 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-22 02:50:46,069 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:50:46,072 INFO L225 Difference]: With dead ends: 809 [2022-11-22 02:50:46,072 INFO L226 Difference]: Without dead ends: 809 [2022-11-22 02:50:46,073 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1164 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=689, Invalid=3601, Unknown=0, NotChecked=0, Total=4290 [2022-11-22 02:50:46,074 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 303 mSDsluCounter, 445 mSDsCounter, 0 mSdLazyCounter, 1676 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 303 SdHoareTripleChecker+Valid, 501 SdHoareTripleChecker+Invalid, 1704 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 1676 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:50:46,074 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [303 Valid, 501 Invalid, 1704 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 1676 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-22 02:50:46,075 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 809 states. [2022-11-22 02:50:46,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 809 to 368. [2022-11-22 02:50:46,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 368 states, 365 states have (on average 1.189041095890411) internal successors, (434), 367 states have internal predecessors, (434), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:46,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 368 states to 368 states and 434 transitions. [2022-11-22 02:50:46,088 INFO L78 Accepts]: Start accepts. Automaton has 368 states and 434 transitions. Word has length 33 [2022-11-22 02:50:46,088 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:50:46,088 INFO L495 AbstractCegarLoop]: Abstraction has 368 states and 434 transitions. [2022-11-22 02:50:46,088 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 40 states have (on average 2.075) internal successors, (83), 41 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:50:46,089 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 434 transitions. [2022-11-22 02:50:46,090 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-22 02:50:46,090 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:50:46,090 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:50:46,100 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-22 02:50:46,297 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-11-22 02:50:46,297 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:50:46,298 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:50:46,298 INFO L85 PathProgramCache]: Analyzing trace with hash 715222831, now seen corresponding path program 2 times [2022-11-22 02:50:46,298 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:50:46,298 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1953424300] [2022-11-22 02:50:46,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:50:46,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:50:46,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:50:47,207 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:50:47,207 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:50:47,207 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1953424300] [2022-11-22 02:50:47,207 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1953424300] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:50:47,207 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [16975051] [2022-11-22 02:50:47,208 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:50:47,208 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:50:47,208 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:50:47,209 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:50:47,231 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-22 02:50:47,590 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 02:50:47,590 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:50:47,594 INFO L263 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-22 02:50:47,596 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:50:47,707 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:50:47,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:50:48,737 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 7 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:50:48,737 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:50:49,885 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:50:49,885 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [16975051] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:50:49,885 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [972278592] [2022-11-22 02:50:49,887 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:50:49,887 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:50:49,888 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:50:49,888 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:50:49,888 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:50:49,936 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:50:49,942 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:50:49,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:50:49,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:50:50,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:50,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:50,131 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:50:50,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:50,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:50,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:50:50,304 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:50:50,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:50:50,518 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:50:50,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:50:50,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:50:50,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:50:50,954 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:50:55,981 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16752#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:50:55,982 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:50:55,982 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:50:55,982 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 17, 16] total 49 [2022-11-22 02:50:55,982 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [444385324] [2022-11-22 02:50:55,982 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:50:55,983 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-11-22 02:50:55,983 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:50:55,984 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-11-22 02:50:55,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=359, Invalid=3801, Unknown=0, NotChecked=0, Total=4160 [2022-11-22 02:50:55,985 INFO L87 Difference]: Start difference. First operand 368 states and 434 transitions. Second operand has 51 states, 50 states have (on average 1.98) internal successors, (99), 50 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:51:07,544 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:51:07,544 INFO L93 Difference]: Finished difference Result 643 states and 707 transitions. [2022-11-22 02:51:07,544 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 68 states. [2022-11-22 02:51:07,545 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 50 states have (on average 1.98) internal successors, (99), 50 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-22 02:51:07,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:51:07,547 INFO L225 Difference]: With dead ends: 643 [2022-11-22 02:51:07,547 INFO L226 Difference]: Without dead ends: 559 [2022-11-22 02:51:07,548 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 178 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 128 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3985 ImplicationChecksByTransitivity, 17.0s TimeCoverageRelationStatistics Valid=2568, Invalid=14202, Unknown=0, NotChecked=0, Total=16770 [2022-11-22 02:51:07,549 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 1187 mSDsluCounter, 338 mSDsCounter, 0 mSdLazyCounter, 1768 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1187 SdHoareTripleChecker+Valid, 358 SdHoareTripleChecker+Invalid, 1844 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 1768 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-22 02:51:07,549 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1187 Valid, 358 Invalid, 1844 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 1768 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-11-22 02:51:07,550 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 559 states. [2022-11-22 02:51:07,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 559 to 348. [2022-11-22 02:51:07,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 348 states, 345 states have (on average 1.1565217391304348) internal successors, (399), 347 states have internal predecessors, (399), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:51:07,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 399 transitions. [2022-11-22 02:51:07,558 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 399 transitions. Word has length 33 [2022-11-22 02:51:07,559 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:51:07,559 INFO L495 AbstractCegarLoop]: Abstraction has 348 states and 399 transitions. [2022-11-22 02:51:07,559 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 50 states have (on average 1.98) internal successors, (99), 50 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:51:07,559 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 399 transitions. [2022-11-22 02:51:07,560 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-22 02:51:07,560 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:51:07,561 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:51:07,573 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-22 02:51:07,767 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable43,29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:51:07,767 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:51:07,768 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:51:07,768 INFO L85 PathProgramCache]: Analyzing trace with hash -1617745989, now seen corresponding path program 8 times [2022-11-22 02:51:07,768 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:51:07,768 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1370758844] [2022-11-22 02:51:07,768 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:51:07,768 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:51:07,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:51:08,835 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 16 proven. 69 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:51:08,835 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:51:08,836 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1370758844] [2022-11-22 02:51:08,836 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1370758844] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:51:08,836 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [979912982] [2022-11-22 02:51:08,836 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:51:08,836 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:51:08,836 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:51:08,837 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:51:08,840 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-22 02:51:09,086 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-11-22 02:51:09,086 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:51:09,089 INFO L263 TraceCheckSpWp]: Trace formula consists of 251 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-22 02:51:09,091 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:51:09,103 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:51:09,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:51:09,351 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:51:14,215 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:51:14,216 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-22 02:51:14,376 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 25 proven. 60 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:51:14,376 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:51:15,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 02:51:15,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-22 02:51:16,002 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 25 proven. 60 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:51:16,003 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [979912982] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:51:16,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [360687230] [2022-11-22 02:51:16,004 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:51:16,004 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:51:16,005 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:51:16,005 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:51:16,005 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:51:16,048 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:51:16,052 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:51:16,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:51:16,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:51:16,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:51:16,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:51:16,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:51:16,317 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:51:16,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:51:16,464 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:51:18,579 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18131#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:51:18,580 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:51:18,580 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:51:18,580 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 17, 17] total 51 [2022-11-22 02:51:18,580 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1061484810] [2022-11-22 02:51:18,580 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:51:18,583 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-11-22 02:51:18,583 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:51:18,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-11-22 02:51:18,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=342, Invalid=3198, Unknown=0, NotChecked=0, Total=3540 [2022-11-22 02:51:18,584 INFO L87 Difference]: Start difference. First operand 348 states and 399 transitions. Second operand has 52 states, 51 states have (on average 1.9019607843137254) internal successors, (97), 52 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:51:22,182 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.71s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 02:51:35,705 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 02:52:04,882 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 02:52:06,888 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 02:52:08,903 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 02:52:10,908 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 02:52:14,137 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 02:52:15,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:52:15,236 INFO L93 Difference]: Finished difference Result 790 states and 861 transitions. [2022-11-22 02:52:15,236 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-22 02:52:15,236 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 51 states have (on average 1.9019607843137254) internal successors, (97), 52 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-22 02:52:15,237 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:52:15,238 INFO L225 Difference]: With dead ends: 790 [2022-11-22 02:52:15,238 INFO L226 Difference]: Without dead ends: 790 [2022-11-22 02:52:15,239 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2135 ImplicationChecksByTransitivity, 49.2s TimeCoverageRelationStatistics Valid=1902, Invalid=9223, Unknown=5, NotChecked=0, Total=11130 [2022-11-22 02:52:15,239 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 901 mSDsluCounter, 271 mSDsCounter, 0 mSdLazyCounter, 1808 mSolverCounterSat, 94 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 901 SdHoareTripleChecker+Valid, 297 SdHoareTripleChecker+Invalid, 1909 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 94 IncrementalHoareTripleChecker+Valid, 1808 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:52:15,239 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [901 Valid, 297 Invalid, 1909 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [94 Valid, 1808 Invalid, 7 Unknown, 0 Unchecked, 16.2s Time] [2022-11-22 02:52:15,241 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 790 states. [2022-11-22 02:52:15,249 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 790 to 356. [2022-11-22 02:52:15,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 356 states, 353 states have (on average 1.161473087818697) internal successors, (410), 355 states have internal predecessors, (410), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:52:15,251 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 410 transitions. [2022-11-22 02:52:15,252 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 410 transitions. Word has length 33 [2022-11-22 02:52:15,252 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:52:15,252 INFO L495 AbstractCegarLoop]: Abstraction has 356 states and 410 transitions. [2022-11-22 02:52:15,252 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 51 states have (on average 1.9019607843137254) internal successors, (97), 52 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:52:15,253 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 410 transitions. [2022-11-22 02:52:15,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-22 02:52:15,254 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:52:15,254 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:52:15,267 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-22 02:52:15,462 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-11-22 02:52:15,462 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:52:15,463 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:52:15,463 INFO L85 PathProgramCache]: Analyzing trace with hash 1881385518, now seen corresponding path program 7 times [2022-11-22 02:52:15,463 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:52:15,463 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [529379784] [2022-11-22 02:52:15,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:52:15,463 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:52:15,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:52:16,013 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:52:16,013 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:52:16,014 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [529379784] [2022-11-22 02:52:16,014 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [529379784] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:52:16,014 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [388862629] [2022-11-22 02:52:16,014 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:52:16,014 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:52:16,015 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:52:16,016 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:52:16,018 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-22 02:52:16,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:52:16,215 INFO L263 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-22 02:52:16,217 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:52:16,520 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:52:16,520 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:52:16,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:52:17,065 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:52:17,065 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [388862629] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:52:17,066 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1758313613] [2022-11-22 02:52:17,067 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:52:17,067 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:52:17,067 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:52:17,068 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:52:17,068 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:52:17,113 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:52:17,119 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:52:17,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:52:17,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:52:17,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:17,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:17,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:17,356 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:52:17,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:52:17,474 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:52:17,477 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:52:17,522 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:52:17,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:52:17,639 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:52:17,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:52:17,880 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:52:22,383 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19609#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:52:22,384 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:52:22,384 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:52:22,384 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 30 [2022-11-22 02:52:22,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1272543480] [2022-11-22 02:52:22,384 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:52:22,385 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-22 02:52:22,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:52:22,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-22 02:52:22,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=182, Invalid=1710, Unknown=0, NotChecked=0, Total=1892 [2022-11-22 02:52:22,385 INFO L87 Difference]: Start difference. First operand 356 states and 410 transitions. Second operand has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:52:23,787 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:52:23,787 INFO L93 Difference]: Finished difference Result 515 states and 579 transitions. [2022-11-22 02:52:23,788 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-22 02:52:23,788 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-22 02:52:23,788 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:52:23,790 INFO L225 Difference]: With dead ends: 515 [2022-11-22 02:52:23,790 INFO L226 Difference]: Without dead ends: 515 [2022-11-22 02:52:23,791 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 67 SyntacticMatches, 5 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 855 ImplicationChecksByTransitivity, 5.9s TimeCoverageRelationStatistics Valid=485, Invalid=3055, Unknown=0, NotChecked=0, Total=3540 [2022-11-22 02:52:23,791 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 256 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 877 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 256 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 890 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 877 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-22 02:52:23,792 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [256 Valid, 213 Invalid, 890 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 877 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-22 02:52:23,792 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 515 states. [2022-11-22 02:52:23,799 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 515 to 404. [2022-11-22 02:52:23,800 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 404 states, 401 states have (on average 1.1795511221945136) internal successors, (473), 403 states have internal predecessors, (473), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:52:23,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 404 states to 404 states and 473 transitions. [2022-11-22 02:52:23,802 INFO L78 Accepts]: Start accepts. Automaton has 404 states and 473 transitions. Word has length 34 [2022-11-22 02:52:23,802 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:52:23,802 INFO L495 AbstractCegarLoop]: Abstraction has 404 states and 473 transitions. [2022-11-22 02:52:23,802 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:52:23,803 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 473 transitions. [2022-11-22 02:52:23,804 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-22 02:52:23,804 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:52:23,804 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:52:23,817 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-22 02:52:24,011 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable45,31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:52:24,011 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:52:24,011 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:52:24,011 INFO L85 PathProgramCache]: Analyzing trace with hash 124267377, now seen corresponding path program 9 times [2022-11-22 02:52:24,012 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:52:24,012 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1910247623] [2022-11-22 02:52:24,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:52:24,012 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:52:24,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:52:24,697 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 21 proven. 78 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:52:24,697 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:52:24,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1910247623] [2022-11-22 02:52:24,698 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1910247623] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:52:24,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1525689742] [2022-11-22 02:52:24,698 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:52:24,699 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:52:24,699 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:52:24,700 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:52:24,704 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-22 02:52:24,883 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:52:24,883 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:52:24,886 INFO L263 TraceCheckSpWp]: Trace formula consists of 262 conjuncts, 54 conjunts are in the unsatisfiable core [2022-11-22 02:52:24,887 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:52:25,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:25,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 02:52:25,278 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 21 proven. 78 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:52:25,278 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:52:25,349 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 02:52:25,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 02:52:25,522 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 21 proven. 78 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:52:25,523 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1525689742] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:52:25,523 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1055022405] [2022-11-22 02:52:25,524 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:52:25,524 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:52:25,524 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:52:25,524 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:52:25,525 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:52:25,563 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:52:25,566 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:52:25,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:52:25,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:52:25,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:25,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:25,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:25,802 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:52:25,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:52:25,924 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:52:27,767 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20810#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:52:27,767 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:52:27,767 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:52:27,767 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 19, 19] total 33 [2022-11-22 02:52:27,768 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [819428959] [2022-11-22 02:52:27,768 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:52:27,768 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-22 02:52:27,768 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:52:27,768 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-22 02:52:27,769 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=129, Invalid=1511, Unknown=0, NotChecked=0, Total=1640 [2022-11-22 02:52:27,769 INFO L87 Difference]: Start difference. First operand 404 states and 473 transitions. Second operand has 33 states, 33 states have (on average 1.8181818181818181) internal successors, (60), 33 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:52:29,827 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:52:29,827 INFO L93 Difference]: Finished difference Result 1110 states and 1219 transitions. [2022-11-22 02:52:29,827 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-22 02:52:29,828 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 1.8181818181818181) internal successors, (60), 33 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-22 02:52:29,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:52:29,830 INFO L225 Difference]: With dead ends: 1110 [2022-11-22 02:52:29,830 INFO L226 Difference]: Without dead ends: 1094 [2022-11-22 02:52:29,830 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 81 SyntacticMatches, 3 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 686 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=293, Invalid=2899, Unknown=0, NotChecked=0, Total=3192 [2022-11-22 02:52:29,830 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 286 mSDsluCounter, 1141 mSDsCounter, 0 mSdLazyCounter, 1731 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 286 SdHoareTripleChecker+Valid, 1208 SdHoareTripleChecker+Invalid, 1745 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 1731 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:52:29,831 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [286 Valid, 1208 Invalid, 1745 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 1731 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-22 02:52:29,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1094 states. [2022-11-22 02:52:29,841 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1094 to 478. [2022-11-22 02:52:29,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 478 states, 475 states have (on average 1.1852631578947368) internal successors, (563), 477 states have internal predecessors, (563), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:52:29,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 478 states to 478 states and 563 transitions. [2022-11-22 02:52:29,844 INFO L78 Accepts]: Start accepts. Automaton has 478 states and 563 transitions. Word has length 35 [2022-11-22 02:52:29,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:52:29,845 INFO L495 AbstractCegarLoop]: Abstraction has 478 states and 563 transitions. [2022-11-22 02:52:29,845 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 1.8181818181818181) internal successors, (60), 33 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:52:29,845 INFO L276 IsEmpty]: Start isEmpty. Operand 478 states and 563 transitions. [2022-11-22 02:52:29,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-22 02:52:29,846 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:52:29,847 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:52:29,859 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Ended with exit code 0 [2022-11-22 02:52:30,053 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-11-22 02:52:30,054 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:52:30,054 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:52:30,054 INFO L85 PathProgramCache]: Analyzing trace with hash -303989623, now seen corresponding path program 1 times [2022-11-22 02:52:30,055 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:52:30,055 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [487235238] [2022-11-22 02:52:30,055 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:52:30,055 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:52:30,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:52:31,135 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-22 02:52:31,135 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:52:31,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [487235238] [2022-11-22 02:52:31,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [487235238] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:52:31,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1071080307] [2022-11-22 02:52:31,135 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:52:31,135 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:52:31,136 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:52:31,137 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:52:31,139 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-22 02:52:31,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:52:31,317 INFO L263 TraceCheckSpWp]: Trace formula consists of 307 conjuncts, 82 conjunts are in the unsatisfiable core [2022-11-22 02:52:31,319 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:52:31,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:52:31,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:31,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:52:32,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:52:32,396 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:52:32,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:52:32,852 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:52:32,855 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:52:32,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 02:52:32,861 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-22 02:52:32,861 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:52:32,878 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1219 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1219) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-22 02:52:45,848 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:52:45,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:52:45,858 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:52:45,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 36 [2022-11-22 02:52:45,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:52:46,509 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 8 proven. 27 refuted. 0 times theorem prover too weak. 3 trivial. 6 not checked. [2022-11-22 02:52:46,509 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1071080307] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:52:46,509 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1354327818] [2022-11-22 02:52:46,511 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:52:46,511 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:52:46,511 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:52:46,512 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:52:46,512 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:52:46,557 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:52:46,560 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:52:46,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:52:46,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:46,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:46,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:46,742 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:52:46,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:46,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:46,844 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:52:46,890 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:52:46,890 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:52:47,094 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:52:47,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:52:47,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:52:47,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:52:47,543 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:52:52,907 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22699#(and (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (or (and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 1 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (exists ((|v_ULTIMATE.start_cstrcat_#t~post4#1.offset_143| Int) (|v_ULTIMATE.start_cstrcat_#t~post4#1.base_144| Int)) (and (<= 0 |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_143|) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_144|) |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_143|) 0)) (<= 0 |v_ULTIMATE.start_cstrcat_#t~post4#1.base_144|) (<= (+ |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_143| 1) (select |#length| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_144|)) (= (select |#valid| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_144|) 1))) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0)) (and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post4#1.base|) |ULTIMATE.start_cstrcat_#t~post4#1.offset|) 0) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstrcat_#t~post5#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|)) (= |#NULL.base| 0))) (not (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|))) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|))' at error location [2022-11-22 02:52:52,908 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:52:52,908 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:52:52,908 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 19, 19] total 51 [2022-11-22 02:52:52,908 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2018829416] [2022-11-22 02:52:52,908 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:52:52,908 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-11-22 02:52:52,908 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:52:52,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-11-22 02:52:52,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=235, Invalid=3751, Unknown=50, NotChecked=124, Total=4160 [2022-11-22 02:52:52,909 INFO L87 Difference]: Start difference. First operand 478 states and 563 transitions. Second operand has 51 states, 51 states have (on average 1.803921568627451) internal successors, (92), 51 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:52:55,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:52:55,672 INFO L93 Difference]: Finished difference Result 576 states and 652 transitions. [2022-11-22 02:52:55,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-22 02:52:55,673 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 51 states have (on average 1.803921568627451) internal successors, (92), 51 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-22 02:52:55,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:52:55,675 INFO L225 Difference]: With dead ends: 576 [2022-11-22 02:52:55,675 INFO L226 Difference]: Without dead ends: 522 [2022-11-22 02:52:55,676 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 65 SyntacticMatches, 1 SemanticMatches, 78 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1626 ImplicationChecksByTransitivity, 21.3s TimeCoverageRelationStatistics Valid=440, Invalid=5676, Unknown=50, NotChecked=154, Total=6320 [2022-11-22 02:52:55,677 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 215 mSDsluCounter, 590 mSDsCounter, 0 mSdLazyCounter, 1627 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 626 SdHoareTripleChecker+Invalid, 1733 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 1627 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 81 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-22 02:52:55,677 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [215 Valid, 626 Invalid, 1733 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 1627 Invalid, 0 Unknown, 81 Unchecked, 1.5s Time] [2022-11-22 02:52:55,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 522 states. [2022-11-22 02:52:55,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 522 to 483. [2022-11-22 02:52:55,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 483 states, 480 states have (on average 1.1583333333333334) internal successors, (556), 482 states have internal predecessors, (556), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:52:55,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 483 states to 483 states and 556 transitions. [2022-11-22 02:52:55,687 INFO L78 Accepts]: Start accepts. Automaton has 483 states and 556 transitions. Word has length 36 [2022-11-22 02:52:55,687 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:52:55,688 INFO L495 AbstractCegarLoop]: Abstraction has 483 states and 556 transitions. [2022-11-22 02:52:55,688 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 51 states have (on average 1.803921568627451) internal successors, (92), 51 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:52:55,688 INFO L276 IsEmpty]: Start isEmpty. Operand 483 states and 556 transitions. [2022-11-22 02:52:55,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-22 02:52:55,689 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:52:55,690 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:52:55,699 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-11-22 02:52:55,896 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-11-22 02:52:55,897 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:52:55,897 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:52:55,897 INFO L85 PathProgramCache]: Analyzing trace with hash 707306453, now seen corresponding path program 3 times [2022-11-22 02:52:55,897 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:52:55,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1289323400] [2022-11-22 02:52:55,897 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:52:55,897 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:52:55,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:52:56,716 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 1 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:52:56,717 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:52:56,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1289323400] [2022-11-22 02:52:56,717 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1289323400] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:52:56,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2044854687] [2022-11-22 02:52:56,717 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:52:56,717 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:52:56,718 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:52:56,718 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:52:56,721 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-22 02:52:56,935 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:52:56,935 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:52:56,938 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 66 conjunts are in the unsatisfiable core [2022-11-22 02:52:56,940 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:52:57,007 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 02:52:57,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 02:52:58,417 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 35 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:52:58,418 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:52:59,923 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 12 proven. 27 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:52:59,923 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2044854687] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:52:59,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1908513469] [2022-11-22 02:52:59,924 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:52:59,925 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:52:59,925 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:52:59,925 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:52:59,925 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:52:59,993 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:52:59,996 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:52:59,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:53:00,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:53:00,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:00,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:00,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:00,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:00,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:00,263 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:53:00,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:53:00,443 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:53:00,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:53:00,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:53:00,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:53:00,789 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:53:05,760 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24070#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:53:05,761 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:53:05,761 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:53:05,761 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 17] total 49 [2022-11-22 02:53:05,761 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [845334789] [2022-11-22 02:53:05,761 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:53:05,761 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-11-22 02:53:05,762 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:53:05,762 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-11-22 02:53:05,762 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=344, Invalid=3816, Unknown=0, NotChecked=0, Total=4160 [2022-11-22 02:53:05,763 INFO L87 Difference]: Start difference. First operand 483 states and 556 transitions. Second operand has 51 states, 50 states have (on average 2.22) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:53:18,383 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:53:18,383 INFO L93 Difference]: Finished difference Result 781 states and 854 transitions. [2022-11-22 02:53:18,383 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 66 states. [2022-11-22 02:53:18,384 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 50 states have (on average 2.22) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-22 02:53:18,384 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:53:18,386 INFO L225 Difference]: With dead ends: 781 [2022-11-22 02:53:18,386 INFO L226 Difference]: Without dead ends: 733 [2022-11-22 02:53:18,387 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 188 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 126 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3406 ImplicationChecksByTransitivity, 18.5s TimeCoverageRelationStatistics Valid=2382, Invalid=13874, Unknown=0, NotChecked=0, Total=16256 [2022-11-22 02:53:18,387 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 1683 mSDsluCounter, 271 mSDsCounter, 0 mSdLazyCounter, 1546 mSolverCounterSat, 105 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1683 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 1651 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 105 IncrementalHoareTripleChecker+Valid, 1546 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-22 02:53:18,387 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1683 Valid, 289 Invalid, 1651 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [105 Valid, 1546 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-11-22 02:53:18,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 733 states. [2022-11-22 02:53:18,395 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 733 to 487. [2022-11-22 02:53:18,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 487 states, 484 states have (on average 1.1611570247933884) internal successors, (562), 486 states have internal predecessors, (562), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:53:18,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 487 states to 487 states and 562 transitions. [2022-11-22 02:53:18,397 INFO L78 Accepts]: Start accepts. Automaton has 487 states and 562 transitions. Word has length 37 [2022-11-22 02:53:18,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:53:18,397 INFO L495 AbstractCegarLoop]: Abstraction has 487 states and 562 transitions. [2022-11-22 02:53:18,397 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 50 states have (on average 2.22) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:53:18,398 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 562 transitions. [2022-11-22 02:53:18,398 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-22 02:53:18,399 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:53:18,399 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:53:18,405 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-22 02:53:18,605 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-22 02:53:18,605 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:53:18,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:53:18,606 INFO L85 PathProgramCache]: Analyzing trace with hash -1190548782, now seen corresponding path program 10 times [2022-11-22 02:53:18,606 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:53:18,606 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [546931897] [2022-11-22 02:53:18,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:53:18,606 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:53:18,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:53:19,700 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 25 proven. 88 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:53:19,701 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:53:19,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [546931897] [2022-11-22 02:53:19,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [546931897] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:53:19,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [404248905] [2022-11-22 02:53:19,701 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:53:19,701 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:53:19,701 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:53:19,702 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:53:19,704 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-22 02:53:19,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:53:19,868 INFO L263 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 65 conjunts are in the unsatisfiable core [2022-11-22 02:53:19,870 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:53:20,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:21,073 INFO L321 Elim1Store]: treesize reduction 14, result has 17.6 percent of original size [2022-11-22 02:53:21,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 28 treesize of output 14 [2022-11-22 02:53:21,129 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 8 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:53:21,129 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:53:21,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 27 [2022-11-22 02:53:21,883 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:53:21,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 31 treesize of output 23 [2022-11-22 02:53:22,673 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 10 proven. 103 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:53:22,673 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [404248905] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:53:22,673 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [341977638] [2022-11-22 02:53:22,674 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:53:22,674 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:53:22,675 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:53:22,675 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:53:22,675 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:53:22,711 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:53:22,714 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:53:22,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:53:22,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:22,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:22,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:22,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:22,934 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:53:22,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:53:23,049 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:53:25,259 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25755#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:53:25,260 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:53:25,260 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:53:25,260 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 22, 22] total 61 [2022-11-22 02:53:25,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [588296284] [2022-11-22 02:53:25,260 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:53:25,260 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 61 states [2022-11-22 02:53:25,260 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:53:25,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 61 interpolants. [2022-11-22 02:53:25,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=225, Invalid=4467, Unknown=0, NotChecked=0, Total=4692 [2022-11-22 02:53:25,261 INFO L87 Difference]: Start difference. First operand 487 states and 562 transitions. Second operand has 61 states, 61 states have (on average 1.7540983606557377) internal successors, (107), 61 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:53:40,156 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:53:40,156 INFO L93 Difference]: Finished difference Result 1414 states and 1533 transitions. [2022-11-22 02:53:40,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 81 states. [2022-11-22 02:53:40,156 INFO L78 Accepts]: Start accepts. Automaton has has 61 states, 61 states have (on average 1.7540983606557377) internal successors, (107), 61 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-22 02:53:40,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:53:40,161 INFO L225 Difference]: With dead ends: 1414 [2022-11-22 02:53:40,161 INFO L226 Difference]: Without dead ends: 1396 [2022-11-22 02:53:40,162 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 208 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 145 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4345 ImplicationChecksByTransitivity, 14.9s TimeCoverageRelationStatistics Valid=1448, Invalid=20014, Unknown=0, NotChecked=0, Total=21462 [2022-11-22 02:53:40,162 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 847 mSDsluCounter, 1616 mSDsCounter, 0 mSdLazyCounter, 5804 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 847 SdHoareTripleChecker+Valid, 1683 SdHoareTripleChecker+Invalid, 5859 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 5804 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:53:40,162 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [847 Valid, 1683 Invalid, 5859 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 5804 Invalid, 0 Unknown, 0 Unchecked, 5.1s Time] [2022-11-22 02:53:40,164 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1396 states. [2022-11-22 02:53:40,173 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1396 to 563. [2022-11-22 02:53:40,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 563 states, 560 states have (on average 1.1696428571428572) internal successors, (655), 562 states have internal predecessors, (655), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:53:40,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 563 states to 563 states and 655 transitions. [2022-11-22 02:53:40,176 INFO L78 Accepts]: Start accepts. Automaton has 563 states and 655 transitions. Word has length 37 [2022-11-22 02:53:40,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:53:40,176 INFO L495 AbstractCegarLoop]: Abstraction has 563 states and 655 transitions. [2022-11-22 02:53:40,176 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 61 states, 61 states have (on average 1.7540983606557377) internal successors, (107), 61 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:53:40,176 INFO L276 IsEmpty]: Start isEmpty. Operand 563 states and 655 transitions. [2022-11-22 02:53:40,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-22 02:53:40,178 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:53:40,178 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:53:40,195 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-22 02:53:40,384 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-22 02:53:40,385 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:53:40,385 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:53:40,385 INFO L85 PathProgramCache]: Analyzing trace with hash 81104054, now seen corresponding path program 8 times [2022-11-22 02:53:40,385 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:53:40,385 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1441270468] [2022-11-22 02:53:40,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:53:40,386 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:53:40,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:53:41,616 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 10 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:53:41,616 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:53:41,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1441270468] [2022-11-22 02:53:41,616 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1441270468] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:53:41,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1862907001] [2022-11-22 02:53:41,616 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:53:41,617 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:53:41,617 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:53:41,632 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:53:41,655 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-22 02:53:42,087 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-22 02:53:42,087 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:53:42,091 INFO L263 TraceCheckSpWp]: Trace formula consists of 327 conjuncts, 126 conjunts are in the unsatisfiable core [2022-11-22 02:53:42,094 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:53:42,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:53:42,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:42,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:53:42,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:53:43,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:53:43,238 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:53:43,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:53:43,642 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:53:43,645 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:53:43,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 02:53:43,650 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 10 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:53:43,650 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:53:56,933 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1382 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1382) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-22 02:53:56,946 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1379 (Array Int Int)) (v_ArrVal_1382 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1379) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1382) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-22 02:53:57,070 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1382 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1382) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-22 02:53:57,076 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:53:57,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:53:57,084 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:53:57,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:53:57,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 02:53:57,572 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 10 proven. 40 refuted. 0 times theorem prover too weak. 0 trivial. 16 not checked. [2022-11-22 02:53:57,572 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1862907001] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:53:57,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2091216285] [2022-11-22 02:53:57,574 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:53:57,574 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:53:57,574 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:53:57,574 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:53:57,575 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:53:57,620 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:53:57,623 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:53:57,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:53:57,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:57,707 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:57,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:57,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:53:57,839 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:53:57,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:53:57,948 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:53:57,949 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:53:57,992 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:53:57,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:53:58,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:53:58,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:53:58,321 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:54:02,975 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '28178#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:54:02,975 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:54:02,976 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:54:02,976 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 21, 21] total 59 [2022-11-22 02:54:02,976 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1993688949] [2022-11-22 02:54:02,976 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:54:02,976 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2022-11-22 02:54:02,976 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:54:02,977 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2022-11-22 02:54:02,977 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=259, Invalid=4374, Unknown=71, NotChecked=408, Total=5112 [2022-11-22 02:54:02,977 INFO L87 Difference]: Start difference. First operand 563 states and 655 transitions. Second operand has 59 states, 59 states have (on average 1.7118644067796611) internal successors, (101), 59 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:07,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:54:07,997 INFO L93 Difference]: Finished difference Result 875 states and 1002 transitions. [2022-11-22 02:54:07,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-11-22 02:54:07,997 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 59 states have (on average 1.7118644067796611) internal successors, (101), 59 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-22 02:54:07,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:54:08,001 INFO L225 Difference]: With dead ends: 875 [2022-11-22 02:54:08,001 INFO L226 Difference]: Without dead ends: 759 [2022-11-22 02:54:08,002 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 99 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 2566 ImplicationChecksByTransitivity, 22.6s TimeCoverageRelationStatistics Valid=661, Invalid=8785, Unknown=72, NotChecked=582, Total=10100 [2022-11-22 02:54:08,003 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 287 mSDsluCounter, 856 mSDsCounter, 0 mSdLazyCounter, 2555 mSolverCounterSat, 44 mSolverCounterUnsat, 19 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 287 SdHoareTripleChecker+Valid, 896 SdHoareTripleChecker+Invalid, 2922 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 2555 IncrementalHoareTripleChecker+Invalid, 19 IncrementalHoareTripleChecker+Unknown, 304 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:54:08,003 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [287 Valid, 896 Invalid, 2922 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 2555 Invalid, 19 Unknown, 304 Unchecked, 2.3s Time] [2022-11-22 02:54:08,004 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 759 states. [2022-11-22 02:54:08,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 759 to 688. [2022-11-22 02:54:08,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 688 states, 685 states have (on average 1.1737226277372264) internal successors, (804), 687 states have internal predecessors, (804), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:08,015 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 688 states to 688 states and 804 transitions. [2022-11-22 02:54:08,016 INFO L78 Accepts]: Start accepts. Automaton has 688 states and 804 transitions. Word has length 38 [2022-11-22 02:54:08,016 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:54:08,016 INFO L495 AbstractCegarLoop]: Abstraction has 688 states and 804 transitions. [2022-11-22 02:54:08,016 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 59 states have (on average 1.7118644067796611) internal successors, (101), 59 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:08,017 INFO L276 IsEmpty]: Start isEmpty. Operand 688 states and 804 transitions. [2022-11-22 02:54:08,018 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-22 02:54:08,018 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:54:08,019 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:54:08,028 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-22 02:54:08,225 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:54:08,226 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:54:08,226 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:54:08,226 INFO L85 PathProgramCache]: Analyzing trace with hash -1985504476, now seen corresponding path program 9 times [2022-11-22 02:54:08,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:54:08,226 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1345242468] [2022-11-22 02:54:08,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:54:08,226 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:54:08,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:54:08,800 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:54:08,800 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:54:08,801 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1345242468] [2022-11-22 02:54:08,801 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1345242468] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:54:08,801 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1406159821] [2022-11-22 02:54:08,801 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:54:08,801 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:54:08,801 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:54:08,802 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:54:08,823 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-22 02:54:09,172 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:54:09,172 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:54:09,176 INFO L263 TraceCheckSpWp]: Trace formula consists of 340 conjuncts, 60 conjunts are in the unsatisfiable core [2022-11-22 02:54:09,178 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:54:09,506 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:54:09,506 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:54:09,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:54:10,067 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:54:10,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1406159821] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:54:10,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2060214707] [2022-11-22 02:54:10,068 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:54:10,069 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:54:10,069 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:54:10,069 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:54:10,069 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:54:10,127 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:54:10,131 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:54:10,131 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:54:10,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:54:10,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:10,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:10,312 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:10,361 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:54:10,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:54:10,469 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:54:10,470 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:54:10,511 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:54:10,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:54:10,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:54:10,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:54:10,793 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:54:14,119 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '30081#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:54:14,119 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:54:14,119 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:54:14,119 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 34 [2022-11-22 02:54:14,119 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1035985437] [2022-11-22 02:54:14,119 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:54:14,120 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-22 02:54:14,120 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:54:14,120 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-22 02:54:14,120 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=209, Invalid=2047, Unknown=0, NotChecked=0, Total=2256 [2022-11-22 02:54:14,121 INFO L87 Difference]: Start difference. First operand 688 states and 804 transitions. Second operand has 35 states, 34 states have (on average 2.5) internal successors, (85), 35 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:15,456 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:54:15,456 INFO L93 Difference]: Finished difference Result 772 states and 878 transitions. [2022-11-22 02:54:15,456 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-22 02:54:15,457 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.5) internal successors, (85), 35 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-22 02:54:15,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:54:15,459 INFO L225 Difference]: With dead ends: 772 [2022-11-22 02:54:15,459 INFO L226 Difference]: Without dead ends: 772 [2022-11-22 02:54:15,460 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 82 SyntacticMatches, 6 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1112 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=615, Invalid=3807, Unknown=0, NotChecked=0, Total=4422 [2022-11-22 02:54:15,460 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 339 mSDsluCounter, 219 mSDsCounter, 0 mSdLazyCounter, 1001 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 339 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 1016 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 1001 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-22 02:54:15,461 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [339 Valid, 239 Invalid, 1016 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 1001 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-22 02:54:15,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 772 states. [2022-11-22 02:54:15,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 772 to 697. [2022-11-22 02:54:15,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 697 states, 694 states have (on average 1.1714697406340058) internal successors, (813), 696 states have internal predecessors, (813), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:15,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 697 states to 697 states and 813 transitions. [2022-11-22 02:54:15,473 INFO L78 Accepts]: Start accepts. Automaton has 697 states and 813 transitions. Word has length 40 [2022-11-22 02:54:15,473 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:54:15,473 INFO L495 AbstractCegarLoop]: Abstraction has 697 states and 813 transitions. [2022-11-22 02:54:15,474 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.5) internal successors, (85), 35 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:15,474 INFO L276 IsEmpty]: Start isEmpty. Operand 697 states and 813 transitions. [2022-11-22 02:54:15,475 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-22 02:54:15,475 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:54:15,476 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:54:15,487 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-11-22 02:54:15,682 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable51 [2022-11-22 02:54:15,682 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:54:15,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:54:15,683 INFO L85 PathProgramCache]: Analyzing trace with hash -1421096581, now seen corresponding path program 3 times [2022-11-22 02:54:15,683 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:54:15,683 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1853915087] [2022-11-22 02:54:15,683 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:54:15,683 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:54:15,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:54:16,560 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:54:16,561 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:54:16,561 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1853915087] [2022-11-22 02:54:16,561 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1853915087] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:54:16,561 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2022916915] [2022-11-22 02:54:16,561 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:54:16,561 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:54:16,561 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:54:16,562 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:54:16,564 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-22 02:54:16,901 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:54:16,901 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:54:16,905 INFO L263 TraceCheckSpWp]: Trace formula consists of 346 conjuncts, 100 conjunts are in the unsatisfiable core [2022-11-22 02:54:16,907 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:54:16,963 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 02:54:16,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 02:54:18,406 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:54:18,406 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:54:19,649 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 25 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:54:19,649 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2022916915] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:54:19,649 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1566697636] [2022-11-22 02:54:19,650 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:54:19,650 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:54:19,650 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:54:19,651 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:54:19,651 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:54:19,706 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:54:19,708 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:54:19,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:54:19,748 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:54:19,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:19,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:19,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:19,920 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:54:19,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:54:20,015 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:54:20,019 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:54:20,063 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:54:20,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:54:20,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:54:20,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:54:20,347 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:54:24,135 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '31891#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:54:24,136 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:54:24,136 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:54:24,136 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 48 [2022-11-22 02:54:24,136 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [516727097] [2022-11-22 02:54:24,136 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:54:24,137 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-22 02:54:24,137 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:54:24,137 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-22 02:54:24,138 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=417, Invalid=3489, Unknown=0, NotChecked=0, Total=3906 [2022-11-22 02:54:24,138 INFO L87 Difference]: Start difference. First operand 697 states and 813 transitions. Second operand has 50 states, 49 states have (on average 2.510204081632653) internal successors, (123), 49 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:31,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:54:31,995 INFO L93 Difference]: Finished difference Result 844 states and 955 transitions. [2022-11-22 02:54:31,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2022-11-22 02:54:31,996 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 49 states have (on average 2.510204081632653) internal successors, (123), 49 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-22 02:54:31,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:54:31,999 INFO L225 Difference]: With dead ends: 844 [2022-11-22 02:54:31,999 INFO L226 Difference]: Without dead ends: 844 [2022-11-22 02:54:32,000 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 76 SyntacticMatches, 0 SemanticMatches, 115 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3592 ImplicationChecksByTransitivity, 12.3s TimeCoverageRelationStatistics Valid=2174, Invalid=11398, Unknown=0, NotChecked=0, Total=13572 [2022-11-22 02:54:32,001 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 882 mSDsluCounter, 131 mSDsCounter, 0 mSdLazyCounter, 1291 mSolverCounterSat, 88 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 882 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 1379 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 88 IncrementalHoareTripleChecker+Valid, 1291 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:54:32,001 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [882 Valid, 143 Invalid, 1379 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [88 Valid, 1291 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-22 02:54:32,002 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 844 states. [2022-11-22 02:54:32,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 844 to 703. [2022-11-22 02:54:32,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 703 states, 700 states have (on average 1.1714285714285715) internal successors, (820), 702 states have internal predecessors, (820), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:32,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 703 states to 703 states and 820 transitions. [2022-11-22 02:54:32,013 INFO L78 Accepts]: Start accepts. Automaton has 703 states and 820 transitions. Word has length 41 [2022-11-22 02:54:32,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:54:32,013 INFO L495 AbstractCegarLoop]: Abstraction has 703 states and 820 transitions. [2022-11-22 02:54:32,013 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 49 states have (on average 2.510204081632653) internal successors, (123), 49 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:32,014 INFO L276 IsEmpty]: Start isEmpty. Operand 703 states and 820 transitions. [2022-11-22 02:54:32,015 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-22 02:54:32,015 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:54:32,016 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:54:32,023 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-11-22 02:54:32,223 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable52,38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:54:32,225 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:54:32,225 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:54:32,225 INFO L85 PathProgramCache]: Analyzing trace with hash -1648847547, now seen corresponding path program 4 times [2022-11-22 02:54:32,225 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:54:32,226 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1767883816] [2022-11-22 02:54:32,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:54:32,226 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:54:32,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:54:32,892 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 36 proven. 92 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:54:32,893 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:54:32,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1767883816] [2022-11-22 02:54:32,893 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1767883816] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:54:32,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [442991405] [2022-11-22 02:54:32,893 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:54:32,893 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:54:32,894 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:54:32,895 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:54:32,926 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-11-22 02:54:33,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:54:33,125 INFO L263 TraceCheckSpWp]: Trace formula consists of 301 conjuncts, 52 conjunts are in the unsatisfiable core [2022-11-22 02:54:33,126 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:54:33,555 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 49 proven. 79 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:54:33,555 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:54:33,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:54:34,212 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 49 proven. 79 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:54:34,212 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [442991405] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:54:34,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1044260212] [2022-11-22 02:54:34,213 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 02:54:34,213 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:54:34,214 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:54:34,214 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:54:34,214 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:54:34,262 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:54:34,266 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:54:34,267 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:54:34,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:54:34,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:34,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:34,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:54:34,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:34,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:34,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:34,595 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:54:34,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:54:34,854 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:54:37,770 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '33841#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:54:37,770 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:54:37,770 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:54:37,770 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 41 [2022-11-22 02:54:37,771 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1932545552] [2022-11-22 02:54:37,771 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:54:37,771 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-11-22 02:54:37,771 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:54:37,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-11-22 02:54:37,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=292, Invalid=2360, Unknown=0, NotChecked=0, Total=2652 [2022-11-22 02:54:37,773 INFO L87 Difference]: Start difference. First operand 703 states and 820 transitions. Second operand has 42 states, 41 states have (on average 2.048780487804878) internal successors, (84), 42 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:40,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:54:40,267 INFO L93 Difference]: Finished difference Result 1796 states and 1960 transitions. [2022-11-22 02:54:40,267 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-22 02:54:40,267 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 41 states have (on average 2.048780487804878) internal successors, (84), 42 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-22 02:54:40,268 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:54:40,273 INFO L225 Difference]: With dead ends: 1796 [2022-11-22 02:54:40,273 INFO L226 Difference]: Without dead ends: 1796 [2022-11-22 02:54:40,274 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 82 SyntacticMatches, 9 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1538 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=777, Invalid=4193, Unknown=0, NotChecked=0, Total=4970 [2022-11-22 02:54:40,274 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 444 mSDsluCounter, 711 mSDsCounter, 0 mSdLazyCounter, 2342 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 444 SdHoareTripleChecker+Valid, 783 SdHoareTripleChecker+Invalid, 2381 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 2342 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-22 02:54:40,275 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [444 Valid, 783 Invalid, 2381 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 2342 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-22 02:54:40,276 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1796 states. [2022-11-22 02:54:40,291 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1796 to 713. [2022-11-22 02:54:40,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 713 states, 710 states have (on average 1.176056338028169) internal successors, (835), 712 states have internal predecessors, (835), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:40,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 713 states to 713 states and 835 transitions. [2022-11-22 02:54:40,293 INFO L78 Accepts]: Start accepts. Automaton has 713 states and 835 transitions. Word has length 41 [2022-11-22 02:54:40,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:54:40,294 INFO L495 AbstractCegarLoop]: Abstraction has 713 states and 835 transitions. [2022-11-22 02:54:40,294 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 41 states have (on average 2.048780487804878) internal successors, (84), 42 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:54:40,294 INFO L276 IsEmpty]: Start isEmpty. Operand 713 states and 835 transitions. [2022-11-22 02:54:40,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-22 02:54:40,296 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:54:40,296 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:54:40,309 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Forceful destruction successful, exit code 0 [2022-11-22 02:54:40,503 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable53 [2022-11-22 02:54:40,504 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:54:40,504 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:54:40,504 INFO L85 PathProgramCache]: Analyzing trace with hash -1369612387, now seen corresponding path program 4 times [2022-11-22 02:54:40,504 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:54:40,504 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2004732331] [2022-11-22 02:54:40,504 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:54:40,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:54:40,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:54:41,541 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 16 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:54:41,541 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:54:41,541 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2004732331] [2022-11-22 02:54:41,542 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2004732331] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:54:41,542 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2027761186] [2022-11-22 02:54:41,542 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:54:41,542 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:54:41,542 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:54:41,543 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:54:41,546 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-11-22 02:54:41,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:54:41,752 INFO L263 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 66 conjunts are in the unsatisfiable core [2022-11-22 02:54:41,753 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:54:41,826 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 02:54:41,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 02:54:43,939 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 25 proven. 57 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:54:43,940 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:54:45,653 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 37 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:54:45,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2027761186] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:54:45,653 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [394147383] [2022-11-22 02:54:45,655 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:54:45,655 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:54:45,655 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:54:45,655 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:54:45,656 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:54:45,697 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:54:45,700 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:54:45,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:54:45,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:45,783 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:45,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:45,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:45,891 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:45,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:54:45,963 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:54:45,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:54:46,164 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:54:46,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:54:46,235 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:54:46,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:54:46,540 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:54:51,923 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '36700#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:54:51,923 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:54:51,924 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:54:51,924 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 60 [2022-11-22 02:54:51,924 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1067766927] [2022-11-22 02:54:51,924 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:54:51,924 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-22 02:54:51,924 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:54:51,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-22 02:54:51,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=513, Invalid=5187, Unknown=0, NotChecked=0, Total=5700 [2022-11-22 02:54:51,926 INFO L87 Difference]: Start difference. First operand 713 states and 835 transitions. Second operand has 62 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:55:09,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:55:09,868 INFO L93 Difference]: Finished difference Result 1455 states and 1584 transitions. [2022-11-22 02:55:09,869 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 97 states. [2022-11-22 02:55:09,869 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-22 02:55:09,869 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:55:09,872 INFO L225 Difference]: With dead ends: 1455 [2022-11-22 02:55:09,873 INFO L226 Difference]: Without dead ends: 1331 [2022-11-22 02:55:09,875 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 168 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7803 ImplicationChecksByTransitivity, 23.7s TimeCoverageRelationStatistics Valid=4517, Invalid=24213, Unknown=0, NotChecked=0, Total=28730 [2022-11-22 02:55:09,875 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 1193 mSDsluCounter, 521 mSDsCounter, 0 mSdLazyCounter, 2962 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1193 SdHoareTripleChecker+Valid, 549 SdHoareTripleChecker+Invalid, 3041 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 2962 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-11-22 02:55:09,875 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1193 Valid, 549 Invalid, 3041 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 2962 Invalid, 0 Unknown, 0 Unchecked, 2.9s Time] [2022-11-22 02:55:09,877 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1331 states. [2022-11-22 02:55:09,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1331 to 645. [2022-11-22 02:55:09,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 645 states, 642 states have (on average 1.1401869158878504) internal successors, (732), 644 states have internal predecessors, (732), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:55:09,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 645 states to 645 states and 732 transitions. [2022-11-22 02:55:09,889 INFO L78 Accepts]: Start accepts. Automaton has 645 states and 732 transitions. Word has length 41 [2022-11-22 02:55:09,889 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:55:09,889 INFO L495 AbstractCegarLoop]: Abstraction has 645 states and 732 transitions. [2022-11-22 02:55:09,889 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:55:09,889 INFO L276 IsEmpty]: Start isEmpty. Operand 645 states and 732 transitions. [2022-11-22 02:55:09,891 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-22 02:55:09,891 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:55:09,891 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:55:09,898 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Forceful destruction successful, exit code 0 [2022-11-22 02:55:10,098 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable54,40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:55:10,098 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:55:10,098 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:55:10,098 INFO L85 PathProgramCache]: Analyzing trace with hash -1721029719, now seen corresponding path program 11 times [2022-11-22 02:55:10,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:55:10,099 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1304911568] [2022-11-22 02:55:10,099 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:55:10,099 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:55:10,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:55:11,205 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 36 proven. 109 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:55:11,206 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:55:11,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1304911568] [2022-11-22 02:55:11,206 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1304911568] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:55:11,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [174945199] [2022-11-22 02:55:11,206 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:55:11,206 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:55:11,206 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:55:11,207 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:55:11,210 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-11-22 02:55:11,515 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-22 02:55:11,515 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:55:11,518 INFO L263 TraceCheckSpWp]: Trace formula consists of 299 conjuncts, 68 conjunts are in the unsatisfiable core [2022-11-22 02:55:11,520 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:55:11,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:12,995 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 02:55:12,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 02:55:13,090 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 9 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:55:13,091 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:55:13,837 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 02:55:13,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 02:55:14,124 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 9 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:55:14,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [174945199] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:55:14,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [207469395] [2022-11-22 02:55:14,125 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:55:14,125 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:55:14,125 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:55:14,126 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:55:14,126 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:55:14,166 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:55:14,169 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:55:14,170 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:55:14,230 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:14,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:14,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:14,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:14,411 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:55:14,411 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:55:14,522 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:55:16,764 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '39298#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:55:16,764 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:55:16,764 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:55:16,764 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 23, 23] total 56 [2022-11-22 02:55:16,764 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1955873970] [2022-11-22 02:55:16,764 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:55:16,765 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2022-11-22 02:55:16,765 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:55:16,765 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2022-11-22 02:55:16,766 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=3842, Unknown=0, NotChecked=0, Total=4032 [2022-11-22 02:55:16,766 INFO L87 Difference]: Start difference. First operand 645 states and 732 transitions. Second operand has 56 states, 56 states have (on average 1.8392857142857142) internal successors, (103), 56 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:55:29,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:55:29,588 INFO L93 Difference]: Finished difference Result 2186 states and 2345 transitions. [2022-11-22 02:55:29,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-11-22 02:55:29,588 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 56 states have (on average 1.8392857142857142) internal successors, (103), 56 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-22 02:55:29,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:55:29,593 INFO L225 Difference]: With dead ends: 2186 [2022-11-22 02:55:29,593 INFO L226 Difference]: Without dead ends: 2166 [2022-11-22 02:55:29,594 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 80 SyntacticMatches, 2 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 9 DeprecatedPredicates, 2739 ImplicationChecksByTransitivity, 12.8s TimeCoverageRelationStatistics Valid=1170, Invalid=12170, Unknown=0, NotChecked=0, Total=13340 [2022-11-22 02:55:29,594 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 2335 mSDsluCounter, 1208 mSDsCounter, 0 mSdLazyCounter, 5297 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2335 SdHoareTripleChecker+Valid, 1250 SdHoareTripleChecker+Invalid, 5343 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 5297 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.9s IncrementalHoareTripleChecker+Time [2022-11-22 02:55:29,594 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2335 Valid, 1250 Invalid, 5343 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 5297 Invalid, 0 Unknown, 0 Unchecked, 4.9s Time] [2022-11-22 02:55:29,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2166 states. [2022-11-22 02:55:29,608 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2166 to 769. [2022-11-22 02:55:29,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 769 states, 766 states have (on average 1.1488250652741514) internal successors, (880), 768 states have internal predecessors, (880), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:55:29,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 769 states to 769 states and 880 transitions. [2022-11-22 02:55:29,611 INFO L78 Accepts]: Start accepts. Automaton has 769 states and 880 transitions. Word has length 41 [2022-11-22 02:55:29,611 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:55:29,611 INFO L495 AbstractCegarLoop]: Abstraction has 769 states and 880 transitions. [2022-11-22 02:55:29,611 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 56 states have (on average 1.8392857142857142) internal successors, (103), 56 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:55:29,611 INFO L276 IsEmpty]: Start isEmpty. Operand 769 states and 880 transitions. [2022-11-22 02:55:29,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-22 02:55:29,613 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:55:29,613 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:55:29,621 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Forceful destruction successful, exit code 0 [2022-11-22 02:55:29,820 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable55 [2022-11-22 02:55:29,820 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:55:29,820 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:55:29,820 INFO L85 PathProgramCache]: Analyzing trace with hash -395570516, now seen corresponding path program 10 times [2022-11-22 02:55:29,820 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:55:29,820 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1169205672] [2022-11-22 02:55:29,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:55:29,821 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:55:29,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:55:31,215 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 12 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:55:31,215 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:55:31,215 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1169205672] [2022-11-22 02:55:31,215 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1169205672] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:55:31,215 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1212628388] [2022-11-22 02:55:31,215 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:55:31,215 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:55:31,216 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:55:31,216 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:55:31,219 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-11-22 02:55:31,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:55:31,434 INFO L263 TraceCheckSpWp]: Trace formula consists of 371 conjuncts, 110 conjunts are in the unsatisfiable core [2022-11-22 02:55:31,437 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:55:31,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:55:31,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:31,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:55:32,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:55:32,260 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:55:32,351 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:55:32,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:55:32,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 02:55:32,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 02:55:32,478 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 12 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:55:32,478 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:55:32,607 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1730 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1730) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-22 02:55:32,618 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1730 (Array Int Int)) (v_ArrVal_1729 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1729) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1730) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-22 02:55:32,628 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1730 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1730) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-22 02:55:35,996 WARN L837 $PredicateComparison]: unable to prove that (and (not (= |c_ULTIMATE.start_cstrcat_~s#1.base| |c_ULTIMATE.start_cstrcat_~append#1.base|)) (forall ((v_ArrVal_1727 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1727) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0))) is different from false [2022-11-22 02:55:36,471 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:55:36,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:55:36,478 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:55:36,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:55:36,753 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 12 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 36 not checked. [2022-11-22 02:55:36,753 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1212628388] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:55:36,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2061652135] [2022-11-22 02:55:36,755 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:55:36,755 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:55:36,755 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:55:36,755 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:55:36,755 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:55:36,789 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:55:36,792 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:55:36,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:55:36,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:55:36,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:36,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:36,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:37,030 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:55:37,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:55:37,155 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:55:37,160 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:55:37,201 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:55:37,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:55:37,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:55:37,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:55:37,476 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:55:41,718 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '42678#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:55:41,719 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:55:41,719 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:55:41,719 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 24, 24] total 54 [2022-11-22 02:55:41,719 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [421850687] [2022-11-22 02:55:41,719 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:55:41,719 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-22 02:55:41,719 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:55:41,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-22 02:55:41,720 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=222, Invalid=3648, Unknown=52, NotChecked=500, Total=4422 [2022-11-22 02:55:41,720 INFO L87 Difference]: Start difference. First operand 769 states and 880 transitions. Second operand has 54 states, 54 states have (on average 1.8333333333333333) internal successors, (99), 54 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:55:45,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:55:45,074 INFO L93 Difference]: Finished difference Result 1144 states and 1293 transitions. [2022-11-22 02:55:45,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-22 02:55:45,075 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 1.8333333333333333) internal successors, (99), 54 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-11-22 02:55:45,075 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:55:45,079 INFO L225 Difference]: With dead ends: 1144 [2022-11-22 02:55:45,079 INFO L226 Difference]: Without dead ends: 1038 [2022-11-22 02:55:45,079 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 182 GetRequests, 90 SyntacticMatches, 10 SemanticMatches, 82 ConstructedPredicates, 4 IntricatePredicates, 1 DeprecatedPredicates, 1647 ImplicationChecksByTransitivity, 11.2s TimeCoverageRelationStatistics Valid=392, Invalid=5892, Unknown=52, NotChecked=636, Total=6972 [2022-11-22 02:55:45,080 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 241 mSDsluCounter, 732 mSDsCounter, 0 mSdLazyCounter, 2399 mSolverCounterSat, 30 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 241 SdHoareTripleChecker+Valid, 781 SdHoareTripleChecker+Invalid, 2852 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 2399 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 422 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-22 02:55:45,080 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [241 Valid, 781 Invalid, 2852 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 2399 Invalid, 1 Unknown, 422 Unchecked, 1.8s Time] [2022-11-22 02:55:45,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1038 states. [2022-11-22 02:55:45,089 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1038 to 912. [2022-11-22 02:55:45,089 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 912 states, 909 states have (on average 1.155115511551155) internal successors, (1050), 911 states have internal predecessors, (1050), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:55:45,090 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 912 states to 912 states and 1050 transitions. [2022-11-22 02:55:45,090 INFO L78 Accepts]: Start accepts. Automaton has 912 states and 1050 transitions. Word has length 44 [2022-11-22 02:55:45,090 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:55:45,090 INFO L495 AbstractCegarLoop]: Abstraction has 912 states and 1050 transitions. [2022-11-22 02:55:45,091 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 1.8333333333333333) internal successors, (99), 54 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:55:45,091 INFO L276 IsEmpty]: Start isEmpty. Operand 912 states and 1050 transitions. [2022-11-22 02:55:45,092 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-22 02:55:45,092 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:55:45,092 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:55:45,103 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Forceful destruction successful, exit code 0 [2022-11-22 02:55:45,298 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable56,42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:55:45,298 INFO L420 AbstractCegarLoop]: === Iteration 58 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:55:45,299 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:55:45,299 INFO L85 PathProgramCache]: Analyzing trace with hash -703665341, now seen corresponding path program 5 times [2022-11-22 02:55:45,299 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:55:45,299 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1758753406] [2022-11-22 02:55:45,299 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:55:45,299 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:55:45,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:55:46,307 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 5 proven. 61 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:55:46,307 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:55:46,307 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1758753406] [2022-11-22 02:55:46,308 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1758753406] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:55:46,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [376038456] [2022-11-22 02:55:46,308 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:55:46,308 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:55:46,308 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:55:46,310 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:55:46,311 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-11-22 02:55:46,790 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 02:55:46,790 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:55:46,794 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 96 conjunts are in the unsatisfiable core [2022-11-22 02:55:46,796 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:55:46,866 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:55:46,866 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:55:48,366 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 3 proven. 63 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:55:48,366 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:55:50,034 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 25 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:55:50,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [376038456] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:55:50,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [8325915] [2022-11-22 02:55:50,036 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:55:50,036 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:55:50,036 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:55:50,036 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:55:50,037 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:55:50,069 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:55:50,072 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:55:50,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:55:50,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:50,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:50,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:50,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:50,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:50,296 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:55:50,337 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:55:50,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:55:50,511 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:55:50,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:55:50,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:55:50,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:55:50,864 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:55:55,831 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '45115#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:55:55,831 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:55:55,831 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:55:55,831 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 22, 20] total 62 [2022-11-22 02:55:55,831 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [695687539] [2022-11-22 02:55:55,831 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:55:55,832 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 64 states [2022-11-22 02:55:55,832 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:55:55,832 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2022-11-22 02:55:55,833 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=433, Invalid=5573, Unknown=0, NotChecked=0, Total=6006 [2022-11-22 02:55:55,833 INFO L87 Difference]: Start difference. First operand 912 states and 1050 transitions. Second operand has 64 states, 63 states have (on average 2.142857142857143) internal successors, (135), 63 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:56:20,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:56:20,037 INFO L93 Difference]: Finished difference Result 1824 states and 1974 transitions. [2022-11-22 02:56:20,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 154 states. [2022-11-22 02:56:20,037 INFO L78 Accepts]: Start accepts. Automaton has has 64 states, 63 states have (on average 2.142857142857143) internal successors, (135), 63 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-22 02:56:20,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:56:20,041 INFO L225 Difference]: With dead ends: 1824 [2022-11-22 02:56:20,041 INFO L226 Difference]: Without dead ends: 1618 [2022-11-22 02:56:20,043 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 304 GetRequests, 75 SyntacticMatches, 2 SemanticMatches, 227 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15905 ImplicationChecksByTransitivity, 28.7s TimeCoverageRelationStatistics Valid=7594, Invalid=44618, Unknown=0, NotChecked=0, Total=52212 [2022-11-22 02:56:20,044 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 3637 mSDsluCounter, 668 mSDsCounter, 0 mSdLazyCounter, 3872 mSolverCounterSat, 283 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3637 SdHoareTripleChecker+Valid, 699 SdHoareTripleChecker+Invalid, 4155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 283 IncrementalHoareTripleChecker+Valid, 3872 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:56:20,044 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3637 Valid, 699 Invalid, 4155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [283 Valid, 3872 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-11-22 02:56:20,045 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1618 states. [2022-11-22 02:56:20,052 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1618 to 924. [2022-11-22 02:56:20,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 924 states, 921 states have (on average 1.1530944625407167) internal successors, (1062), 923 states have internal predecessors, (1062), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:56:20,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 924 states to 924 states and 1062 transitions. [2022-11-22 02:56:20,055 INFO L78 Accepts]: Start accepts. Automaton has 924 states and 1062 transitions. Word has length 45 [2022-11-22 02:56:20,055 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:56:20,055 INFO L495 AbstractCegarLoop]: Abstraction has 924 states and 1062 transitions. [2022-11-22 02:56:20,056 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 64 states, 63 states have (on average 2.142857142857143) internal successors, (135), 63 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:56:20,056 INFO L276 IsEmpty]: Start isEmpty. Operand 924 states and 1062 transitions. [2022-11-22 02:56:20,057 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-22 02:56:20,057 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:56:20,058 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:56:20,065 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Forceful destruction successful, exit code 0 [2022-11-22 02:56:20,264 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable57 [2022-11-22 02:56:20,265 INFO L420 AbstractCegarLoop]: === Iteration 59 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:56:20,265 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:56:20,265 INFO L85 PathProgramCache]: Analyzing trace with hash -1930462656, now seen corresponding path program 12 times [2022-11-22 02:56:20,265 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:56:20,265 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [754052588] [2022-11-22 02:56:20,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:56:20,265 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:56:20,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:56:21,398 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 49 proven. 132 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:56:21,398 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:56:21,399 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [754052588] [2022-11-22 02:56:21,399 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [754052588] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:56:21,399 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [517711415] [2022-11-22 02:56:21,399 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:56:21,399 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:56:21,399 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:56:21,407 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:56:21,437 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-11-22 02:56:21,665 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:56:21,665 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:56:21,668 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 92 conjunts are in the unsatisfiable core [2022-11-22 02:56:21,671 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:56:22,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:56:24,399 INFO L321 Elim1Store]: treesize reduction 57, result has 12.3 percent of original size [2022-11-22 02:56:24,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 0 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 88 treesize of output 42 [2022-11-22 02:56:24,469 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 11 proven. 170 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:56:24,469 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:56:26,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 121 treesize of output 105 [2022-11-22 02:56:26,685 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:56:26,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 0 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 121 treesize of output 89 [2022-11-22 02:56:27,376 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-22 02:56:28,201 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 66 proven. 115 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:56:28,201 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [517711415] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:56:28,201 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [391776139] [2022-11-22 02:56:28,202 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:56:28,203 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:56:28,203 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:56:28,203 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:56:28,203 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:56:28,243 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:56:28,247 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:56:28,248 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:56:28,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:56:28,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:56:28,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:56:28,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:56:28,527 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:56:28,528 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:56:28,626 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:56:31,256 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '48527#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:56:31,256 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:56:31,256 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:56:31,256 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 32, 32] total 84 [2022-11-22 02:56:31,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1562111356] [2022-11-22 02:56:31,256 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:56:31,257 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 84 states [2022-11-22 02:56:31,257 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:56:31,257 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 84 interpolants. [2022-11-22 02:56:31,257 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=492, Invalid=7880, Unknown=0, NotChecked=0, Total=8372 [2022-11-22 02:56:31,258 INFO L87 Difference]: Start difference. First operand 924 states and 1062 transitions. Second operand has 84 states, 84 states have (on average 1.5595238095238095) internal successors, (131), 84 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:57:22,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:57:22,862 INFO L93 Difference]: Finished difference Result 3028 states and 3274 transitions. [2022-11-22 02:57:22,862 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 163 states. [2022-11-22 02:57:22,863 INFO L78 Accepts]: Start accepts. Automaton has has 84 states, 84 states have (on average 1.5595238095238095) internal successors, (131), 84 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-22 02:57:22,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:57:22,869 INFO L225 Difference]: With dead ends: 3028 [2022-11-22 02:57:22,869 INFO L226 Difference]: Without dead ends: 3006 [2022-11-22 02:57:22,871 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 317 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 250 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16284 ImplicationChecksByTransitivity, 47.1s TimeCoverageRelationStatistics Valid=4955, Invalid=58297, Unknown=0, NotChecked=0, Total=63252 [2022-11-22 02:57:22,871 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 3425 mSDsluCounter, 1391 mSDsCounter, 0 mSdLazyCounter, 12554 mSolverCounterSat, 197 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3425 SdHoareTripleChecker+Valid, 1431 SdHoareTripleChecker+Invalid, 12751 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 197 IncrementalHoareTripleChecker+Valid, 12554 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.9s IncrementalHoareTripleChecker+Time [2022-11-22 02:57:22,871 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3425 Valid, 1431 Invalid, 12751 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [197 Valid, 12554 Invalid, 0 Unknown, 0 Unchecked, 12.9s Time] [2022-11-22 02:57:22,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3006 states. [2022-11-22 02:57:22,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3006 to 1072. [2022-11-22 02:57:22,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1072 states, 1069 states have (on average 1.1655753040224508) internal successors, (1246), 1071 states have internal predecessors, (1246), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:57:22,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1072 states to 1072 states and 1246 transitions. [2022-11-22 02:57:22,886 INFO L78 Accepts]: Start accepts. Automaton has 1072 states and 1246 transitions. Word has length 45 [2022-11-22 02:57:22,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:57:22,887 INFO L495 AbstractCegarLoop]: Abstraction has 1072 states and 1246 transitions. [2022-11-22 02:57:22,887 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 84 states, 84 states have (on average 1.5595238095238095) internal successors, (131), 84 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:57:22,887 INFO L276 IsEmpty]: Start isEmpty. Operand 1072 states and 1246 transitions. [2022-11-22 02:57:22,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-22 02:57:22,888 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:57:22,889 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:57:22,899 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Forceful destruction successful, exit code 0 [2022-11-22 02:57:23,095 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable58 [2022-11-22 02:57:23,095 INFO L420 AbstractCegarLoop]: === Iteration 60 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:57:23,095 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:57:23,095 INFO L85 PathProgramCache]: Analyzing trace with hash 1508447898, now seen corresponding path program 11 times [2022-11-22 02:57:23,095 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:57:23,095 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2046648848] [2022-11-22 02:57:23,096 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:57:23,096 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:57:23,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:57:23,637 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 16 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:57:23,637 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:57:23,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2046648848] [2022-11-22 02:57:23,637 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2046648848] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:57:23,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1187666783] [2022-11-22 02:57:23,638 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:57:23,638 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:57:23,638 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:57:23,639 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:57:23,641 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-11-22 02:57:24,061 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-22 02:57:24,061 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:57:24,065 INFO L263 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 59 conjunts are in the unsatisfiable core [2022-11-22 02:57:24,067 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:57:24,634 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 25 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:57:24,635 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:57:25,226 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-22 02:57:25,430 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 25 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:57:25,430 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1187666783] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:57:25,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1299452910] [2022-11-22 02:57:25,431 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:57:25,431 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:57:25,432 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:57:25,432 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:57:25,432 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:57:25,471 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:57:25,475 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:57:25,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:57:25,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:57:25,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:57:25,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:57:25,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:57:25,731 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:57:25,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:57:25,852 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:57:25,853 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:57:25,899 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:57:25,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:57:26,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:57:26,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:57:26,251 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:57:29,928 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '53272#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:57:29,929 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:57:29,929 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:57:29,929 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 45 [2022-11-22 02:57:29,929 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [695161400] [2022-11-22 02:57:29,929 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:57:29,929 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-11-22 02:57:29,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:57:29,930 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-11-22 02:57:29,930 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=347, Invalid=3075, Unknown=0, NotChecked=0, Total=3422 [2022-11-22 02:57:29,930 INFO L87 Difference]: Start difference. First operand 1072 states and 1246 transitions. Second operand has 46 states, 45 states have (on average 2.688888888888889) internal successors, (121), 46 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:57:31,510 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:57:31,510 INFO L93 Difference]: Finished difference Result 1217 states and 1381 transitions. [2022-11-22 02:57:31,511 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-22 02:57:31,511 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 45 states have (on average 2.688888888888889) internal successors, (121), 46 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2022-11-22 02:57:31,511 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:57:31,513 INFO L225 Difference]: With dead ends: 1217 [2022-11-22 02:57:31,513 INFO L226 Difference]: Without dead ends: 1217 [2022-11-22 02:57:31,513 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 90 SyntacticMatches, 7 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1888 ImplicationChecksByTransitivity, 5.9s TimeCoverageRelationStatistics Valid=939, Invalid=5541, Unknown=0, NotChecked=0, Total=6480 [2022-11-22 02:57:31,513 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 488 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 839 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 488 SdHoareTripleChecker+Valid, 225 SdHoareTripleChecker+Invalid, 868 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 839 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 02:57:31,514 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [488 Valid, 225 Invalid, 868 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 839 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-22 02:57:31,515 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1217 states. [2022-11-22 02:57:31,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1217 to 1085. [2022-11-22 02:57:31,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1085 states, 1082 states have (on average 1.1635859519408502) internal successors, (1259), 1084 states have internal predecessors, (1259), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:57:31,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1085 states to 1085 states and 1259 transitions. [2022-11-22 02:57:31,530 INFO L78 Accepts]: Start accepts. Automaton has 1085 states and 1259 transitions. Word has length 46 [2022-11-22 02:57:31,530 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:57:31,531 INFO L495 AbstractCegarLoop]: Abstraction has 1085 states and 1259 transitions. [2022-11-22 02:57:31,531 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 45 states have (on average 2.688888888888889) internal successors, (121), 46 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:57:31,531 INFO L276 IsEmpty]: Start isEmpty. Operand 1085 states and 1259 transitions. [2022-11-22 02:57:31,532 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-22 02:57:31,533 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:57:31,533 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:57:31,540 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Forceful destruction successful, exit code 0 [2022-11-22 02:57:31,739 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable59 [2022-11-22 02:57:31,739 INFO L420 AbstractCegarLoop]: === Iteration 61 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:57:31,739 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:57:31,739 INFO L85 PathProgramCache]: Analyzing trace with hash 609806313, now seen corresponding path program 6 times [2022-11-22 02:57:31,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:57:31,740 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [865057177] [2022-11-22 02:57:31,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:57:31,740 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:57:31,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:57:32,765 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 9 proven. 81 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:57:32,765 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:57:32,765 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [865057177] [2022-11-22 02:57:32,765 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [865057177] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:57:32,765 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1595078944] [2022-11-22 02:57:32,765 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:57:32,765 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:57:32,765 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:57:32,766 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:57:32,769 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-11-22 02:57:33,294 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:57:33,294 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:57:33,299 INFO L263 TraceCheckSpWp]: Trace formula consists of 394 conjuncts, 106 conjunts are in the unsatisfiable core [2022-11-22 02:57:33,300 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:57:33,364 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 02:57:33,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 02:57:35,350 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 17 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:57:35,351 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:57:37,280 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 29 proven. 61 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:57:37,280 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1595078944] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:57:37,280 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1680821660] [2022-11-22 02:57:37,281 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:57:37,282 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:57:37,282 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:57:37,282 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:57:37,282 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:57:37,321 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:57:37,325 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:57:37,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:57:37,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:57:37,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:57:37,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:57:37,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:57:37,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:57:37,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:57:37,582 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:57:37,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:57:37,790 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:57:37,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:57:37,857 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:57:37,954 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:57:38,135 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:57:43,222 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '55982#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:57:43,223 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:57:43,223 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:57:43,223 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 21] total 61 [2022-11-22 02:57:43,223 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [955183342] [2022-11-22 02:57:43,223 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:57:43,223 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-11-22 02:57:43,223 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:57:43,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-11-22 02:57:43,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=499, Invalid=5353, Unknown=0, NotChecked=0, Total=5852 [2022-11-22 02:57:43,224 INFO L87 Difference]: Start difference. First operand 1085 states and 1259 transitions. Second operand has 63 states, 62 states have (on average 2.370967741935484) internal successors, (147), 62 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:58:02,494 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:58:02,494 INFO L93 Difference]: Finished difference Result 1569 states and 1744 transitions. [2022-11-22 02:58:02,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 106 states. [2022-11-22 02:58:02,494 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 62 states have (on average 2.370967741935484) internal successors, (147), 62 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-22 02:58:02,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:58:02,499 INFO L225 Difference]: With dead ends: 1569 [2022-11-22 02:58:02,499 INFO L226 Difference]: Without dead ends: 1505 [2022-11-22 02:58:02,501 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 178 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9063 ImplicationChecksByTransitivity, 25.3s TimeCoverageRelationStatistics Valid=5548, Invalid=26672, Unknown=0, NotChecked=0, Total=32220 [2022-11-22 02:58:02,501 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 1831 mSDsluCounter, 328 mSDsCounter, 0 mSdLazyCounter, 2285 mSolverCounterSat, 118 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1831 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 2403 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 118 IncrementalHoareTripleChecker+Valid, 2285 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:58:02,502 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1831 Valid, 348 Invalid, 2403 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [118 Valid, 2285 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-11-22 02:58:02,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1505 states. [2022-11-22 02:58:02,514 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1505 to 1089. [2022-11-22 02:58:02,515 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1089 states, 1086 states have (on average 1.1648250460405156) internal successors, (1265), 1088 states have internal predecessors, (1265), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:58:02,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1089 states to 1089 states and 1265 transitions. [2022-11-22 02:58:02,517 INFO L78 Accepts]: Start accepts. Automaton has 1089 states and 1265 transitions. Word has length 49 [2022-11-22 02:58:02,517 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:58:02,518 INFO L495 AbstractCegarLoop]: Abstraction has 1089 states and 1265 transitions. [2022-11-22 02:58:02,518 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 62 states have (on average 2.370967741935484) internal successors, (147), 62 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:58:02,518 INFO L276 IsEmpty]: Start isEmpty. Operand 1089 states and 1265 transitions. [2022-11-22 02:58:02,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-22 02:58:02,520 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:58:02,520 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:58:02,531 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Forceful destruction successful, exit code 0 [2022-11-22 02:58:02,728 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable60,46 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:58:02,728 INFO L420 AbstractCegarLoop]: === Iteration 62 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:58:02,728 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:58:02,728 INFO L85 PathProgramCache]: Analyzing trace with hash 1957611275, now seen corresponding path program 7 times [2022-11-22 02:58:02,728 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:58:02,728 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [290761696] [2022-11-22 02:58:02,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:58:02,729 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:58:02,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:58:03,979 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 36 proven. 104 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:58:03,979 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:58:03,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [290761696] [2022-11-22 02:58:03,980 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [290761696] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:58:03,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [390676252] [2022-11-22 02:58:03,980 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:58:03,980 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:58:03,980 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:58:03,981 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:58:03,990 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-11-22 02:58:04,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:58:04,219 INFO L263 TraceCheckSpWp]: Trace formula consists of 362 conjuncts, 76 conjunts are in the unsatisfiable core [2022-11-22 02:58:04,220 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:58:04,295 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 02:58:04,296 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 02:58:06,929 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 49 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:58:06,930 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:58:09,120 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 65 proven. 75 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:58:09,120 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [390676252] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:58:09,120 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1125955651] [2022-11-22 02:58:09,121 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:58:09,121 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:58:09,121 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:58:09,121 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:58:09,121 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:58:09,156 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:58:09,159 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:58:09,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:58:09,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:58:09,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:58:09,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:58:09,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:58:09,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:58:09,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:58:09,425 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:58:09,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:58:09,606 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 02:58:09,606 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 02:58:09,677 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:58:09,764 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:58:09,959 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:58:15,602 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '59222#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:58:15,602 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:58:15,602 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:58:15,602 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 24, 24] total 72 [2022-11-22 02:58:15,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1545514331] [2022-11-22 02:58:15,603 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:58:15,603 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 74 states [2022-11-22 02:58:15,603 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:58:15,603 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 74 interpolants. [2022-11-22 02:58:15,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=683, Invalid=6973, Unknown=0, NotChecked=0, Total=7656 [2022-11-22 02:58:15,604 INFO L87 Difference]: Start difference. First operand 1089 states and 1265 transitions. Second operand has 74 states, 73 states have (on average 2.0136986301369864) internal successors, (147), 73 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:58:39,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:58:39,736 INFO L93 Difference]: Finished difference Result 2452 states and 2648 transitions. [2022-11-22 02:58:39,736 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 125 states. [2022-11-22 02:58:39,736 INFO L78 Accepts]: Start accepts. Automaton has has 74 states, 73 states have (on average 2.0136986301369864) internal successors, (147), 73 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-22 02:58:39,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:58:39,740 INFO L225 Difference]: With dead ends: 2452 [2022-11-22 02:58:39,741 INFO L226 Difference]: Without dead ends: 2300 [2022-11-22 02:58:39,743 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 291 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 208 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12106 ImplicationChecksByTransitivity, 30.3s TimeCoverageRelationStatistics Valid=7204, Invalid=36686, Unknown=0, NotChecked=0, Total=43890 [2022-11-22 02:58:39,744 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 1734 mSDsluCounter, 722 mSDsCounter, 0 mSdLazyCounter, 3965 mSolverCounterSat, 103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1734 SdHoareTripleChecker+Valid, 758 SdHoareTripleChecker+Invalid, 4068 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 103 IncrementalHoareTripleChecker+Valid, 3965 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.5s IncrementalHoareTripleChecker+Time [2022-11-22 02:58:39,744 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1734 Valid, 758 Invalid, 4068 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [103 Valid, 3965 Invalid, 0 Unknown, 0 Unchecked, 3.5s Time] [2022-11-22 02:58:39,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2300 states. [2022-11-22 02:58:39,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2300 to 961. [2022-11-22 02:58:39,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 961 states, 958 states have (on average 1.1346555323590815) internal successors, (1087), 960 states have internal predecessors, (1087), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:58:39,757 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 961 states to 961 states and 1087 transitions. [2022-11-22 02:58:39,757 INFO L78 Accepts]: Start accepts. Automaton has 961 states and 1087 transitions. Word has length 49 [2022-11-22 02:58:39,757 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:58:39,757 INFO L495 AbstractCegarLoop]: Abstraction has 961 states and 1087 transitions. [2022-11-22 02:58:39,757 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 74 states, 73 states have (on average 2.0136986301369864) internal successors, (147), 73 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:58:39,757 INFO L276 IsEmpty]: Start isEmpty. Operand 961 states and 1087 transitions. [2022-11-22 02:58:39,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-22 02:58:39,759 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:58:39,759 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 10, 10, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:58:39,771 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Forceful destruction successful, exit code 0 [2022-11-22 02:58:39,965 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable61,47 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:58:39,965 INFO L420 AbstractCegarLoop]: === Iteration 63 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:58:39,966 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:58:39,966 INFO L85 PathProgramCache]: Analyzing trace with hash -1225103721, now seen corresponding path program 13 times [2022-11-22 02:58:39,966 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:58:39,966 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1193858900] [2022-11-22 02:58:39,966 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:58:39,966 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:58:39,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:58:41,559 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 64 proven. 157 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:58:41,559 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:58:41,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1193858900] [2022-11-22 02:58:41,559 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1193858900] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:58:41,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2062459194] [2022-11-22 02:58:41,560 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:58:41,560 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:58:41,560 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:58:41,561 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:58:41,563 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Waiting until timeout for monitored process [2022-11-22 02:58:41,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:58:41,805 INFO L263 TraceCheckSpWp]: Trace formula consists of 347 conjuncts, 80 conjunts are in the unsatisfiable core [2022-11-22 02:58:41,807 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:58:42,438 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:58:43,725 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 02:58:43,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 02:58:43,799 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 11 proven. 210 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:58:43,799 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:58:44,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 02:58:44,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 02:58:45,190 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 11 proven. 210 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:58:45,190 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2062459194] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:58:45,191 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1664882571] [2022-11-22 02:58:45,192 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 02:58:45,192 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:58:45,192 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:58:45,193 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:58:45,193 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:58:45,223 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:58:45,226 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:58:45,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:58:45,273 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:58:45,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:58:45,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:58:45,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:58:45,475 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:58:45,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:58:45,577 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:58:48,011 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '63247#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:58:48,011 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:58:48,011 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:58:48,011 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 27, 27] total 66 [2022-11-22 02:58:48,012 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2011852252] [2022-11-22 02:58:48,012 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:58:48,012 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 66 states [2022-11-22 02:58:48,012 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:58:48,012 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 66 interpolants. [2022-11-22 02:58:48,013 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=227, Invalid=5175, Unknown=0, NotChecked=0, Total=5402 [2022-11-22 02:58:48,013 INFO L87 Difference]: Start difference. First operand 961 states and 1087 transitions. Second operand has 66 states, 66 states have (on average 1.8636363636363635) internal successors, (123), 66 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:59:06,126 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:59:06,126 INFO L93 Difference]: Finished difference Result 3411 states and 3643 transitions. [2022-11-22 02:59:06,126 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 89 states. [2022-11-22 02:59:06,127 INFO L78 Accepts]: Start accepts. Automaton has has 66 states, 66 states have (on average 1.8636363636363635) internal successors, (123), 66 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-22 02:59:06,127 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:59:06,133 INFO L225 Difference]: With dead ends: 3411 [2022-11-22 02:59:06,133 INFO L226 Difference]: Without dead ends: 3387 [2022-11-22 02:59:06,134 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 258 GetRequests, 98 SyntacticMatches, 2 SemanticMatches, 158 ConstructedPredicates, 0 IntricatePredicates, 11 DeprecatedPredicates, 6223 ImplicationChecksByTransitivity, 18.2s TimeCoverageRelationStatistics Valid=1554, Invalid=23886, Unknown=0, NotChecked=0, Total=25440 [2022-11-22 02:59:06,135 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 942 mSDsluCounter, 2278 mSDsCounter, 0 mSdLazyCounter, 7043 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 942 SdHoareTripleChecker+Valid, 2372 SdHoareTripleChecker+Invalid, 7090 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 7043 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:59:06,135 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [942 Valid, 2372 Invalid, 7090 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [47 Valid, 7043 Invalid, 0 Unknown, 0 Unchecked, 6.1s Time] [2022-11-22 02:59:06,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3387 states. [2022-11-22 02:59:06,149 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3387 to 1121. [2022-11-22 02:59:06,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1121 states, 1118 states have (on average 1.1386404293381038) internal successors, (1273), 1120 states have internal predecessors, (1273), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:59:06,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1121 states to 1121 states and 1273 transitions. [2022-11-22 02:59:06,151 INFO L78 Accepts]: Start accepts. Automaton has 1121 states and 1273 transitions. Word has length 49 [2022-11-22 02:59:06,151 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:59:06,151 INFO L495 AbstractCegarLoop]: Abstraction has 1121 states and 1273 transitions. [2022-11-22 02:59:06,151 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 66 states, 66 states have (on average 1.8636363636363635) internal successors, (123), 66 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:59:06,151 INFO L276 IsEmpty]: Start isEmpty. Operand 1121 states and 1273 transitions. [2022-11-22 02:59:06,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-22 02:59:06,153 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:59:06,153 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:59:06,167 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Forceful destruction successful, exit code 0 [2022-11-22 02:59:06,359 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 48 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable62 [2022-11-22 02:59:06,360 INFO L420 AbstractCegarLoop]: === Iteration 64 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:59:06,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:59:06,360 INFO L85 PathProgramCache]: Analyzing trace with hash 2079777570, now seen corresponding path program 12 times [2022-11-22 02:59:06,360 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:59:06,361 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [460179821] [2022-11-22 02:59:06,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:59:06,361 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:59:06,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:59:08,079 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 14 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:59:08,079 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:59:08,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [460179821] [2022-11-22 02:59:08,079 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [460179821] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:59:08,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [250703284] [2022-11-22 02:59:08,080 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:59:08,080 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:59:08,080 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:59:08,081 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:59:08,083 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2022-11-22 02:59:08,469 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:59:08,470 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:59:08,475 INFO L263 TraceCheckSpWp]: Trace formula consists of 415 conjuncts, 161 conjunts are in the unsatisfiable core [2022-11-22 02:59:08,478 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:59:08,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:59:09,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:59:09,269 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:59:09,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:59:09,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:59:09,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:59:10,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:59:10,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:59:10,712 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:59:10,907 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:59:10,909 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:59:10,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 02:59:10,914 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 14 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:59:10,914 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:59:11,066 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2180 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2180) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-22 02:59:16,679 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2180 (Array Int Int)) (v_ArrVal_2178 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2178) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2180) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-22 02:59:21,301 WARN L837 $PredicateComparison]: unable to prove that (and (forall ((v_ArrVal_2175 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2175) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 5 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) (not (= |c_ULTIMATE.start_cstrcat_~s#1.base| |c_ULTIMATE.start_cstrcat_~append#1.base|))) is different from false [2022-11-22 02:59:21,586 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:59:21,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:59:21,594 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:59:21,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:59:21,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 02:59:22,339 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 14 proven. 86 refuted. 0 times theorem prover too weak. 0 trivial. 34 not checked. [2022-11-22 02:59:22,339 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [250703284] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:59:22,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2048389101] [2022-11-22 02:59:22,340 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:59:22,341 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:59:22,341 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:59:22,341 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:59:22,341 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:59:22,382 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:59:22,384 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:59:22,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:59:22,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:59:22,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:59:22,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:59:22,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:59:22,603 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:59:22,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:59:22,727 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:59:22,729 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:59:22,771 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:59:22,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:59:22,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:59:22,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:59:23,028 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:59:27,368 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '68331#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:59:27,369 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:59:27,369 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:59:27,369 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 27, 27] total 77 [2022-11-22 02:59:27,369 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [114003950] [2022-11-22 02:59:27,369 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:59:27,369 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 77 states [2022-11-22 02:59:27,370 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:59:27,370 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 77 interpolants. [2022-11-22 02:59:27,371 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=320, Invalid=7083, Unknown=91, NotChecked=516, Total=8010 [2022-11-22 02:59:27,371 INFO L87 Difference]: Start difference. First operand 1121 states and 1273 transitions. Second operand has 77 states, 77 states have (on average 1.7532467532467533) internal successors, (135), 77 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:59:33,104 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:59:33,105 INFO L93 Difference]: Finished difference Result 1677 states and 1886 transitions. [2022-11-22 02:59:33,105 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 61 states. [2022-11-22 02:59:33,105 INFO L78 Accepts]: Start accepts. Automaton has has 77 states, 77 states have (on average 1.7532467532467533) internal successors, (135), 77 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-22 02:59:33,106 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:59:33,108 INFO L225 Difference]: With dead ends: 1677 [2022-11-22 02:59:33,108 INFO L226 Difference]: Without dead ends: 1417 [2022-11-22 02:59:33,109 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 207 GetRequests, 91 SyntacticMatches, 8 SemanticMatches, 108 ConstructedPredicates, 3 IntricatePredicates, 3 DeprecatedPredicates, 3469 ImplicationChecksByTransitivity, 20.4s TimeCoverageRelationStatistics Valid=516, Invalid=10747, Unknown=91, NotChecked=636, Total=11990 [2022-11-22 02:59:33,110 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 177 mSDsluCounter, 1220 mSDsCounter, 0 mSdLazyCounter, 3938 mSolverCounterSat, 52 mSolverCounterUnsat, 25 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 177 SdHoareTripleChecker+Valid, 1260 SdHoareTripleChecker+Invalid, 4356 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 3938 IncrementalHoareTripleChecker+Invalid, 25 IncrementalHoareTripleChecker+Unknown, 341 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2022-11-22 02:59:33,110 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [177 Valid, 1260 Invalid, 4356 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 3938 Invalid, 25 Unknown, 341 Unchecked, 3.4s Time] [2022-11-22 02:59:33,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1417 states. [2022-11-22 02:59:33,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1417 to 1304. [2022-11-22 02:59:33,124 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1304 states, 1301 states have (on average 1.1445042275172943) internal successors, (1489), 1303 states have internal predecessors, (1489), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:59:33,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1304 states to 1304 states and 1489 transitions. [2022-11-22 02:59:33,126 INFO L78 Accepts]: Start accepts. Automaton has 1304 states and 1489 transitions. Word has length 50 [2022-11-22 02:59:33,126 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:59:33,126 INFO L495 AbstractCegarLoop]: Abstraction has 1304 states and 1489 transitions. [2022-11-22 02:59:33,127 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 77 states, 77 states have (on average 1.7532467532467533) internal successors, (135), 77 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:59:33,127 INFO L276 IsEmpty]: Start isEmpty. Operand 1304 states and 1489 transitions. [2022-11-22 02:59:33,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-22 02:59:33,128 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:59:33,129 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:59:33,163 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Ended with exit code 0 [2022-11-22 02:59:33,336 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable63,49 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:59:33,336 INFO L420 AbstractCegarLoop]: === Iteration 65 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:59:33,337 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:59:33,337 INFO L85 PathProgramCache]: Analyzing trace with hash -59720560, now seen corresponding path program 13 times [2022-11-22 02:59:33,337 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:59:33,337 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [969198571] [2022-11-22 02:59:33,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:59:33,337 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:59:33,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:59:34,209 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 25 proven. 122 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:59:34,209 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:59:34,209 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [969198571] [2022-11-22 02:59:34,209 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [969198571] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:59:34,210 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [114671885] [2022-11-22 02:59:34,210 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:59:34,210 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:59:34,210 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:59:34,211 INFO L229 MonitoredProcess]: Starting monitored process 50 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:59:34,235 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Waiting until timeout for monitored process [2022-11-22 02:59:34,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:59:34,520 INFO L263 TraceCheckSpWp]: Trace formula consists of 428 conjuncts, 78 conjunts are in the unsatisfiable core [2022-11-22 02:59:34,522 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:59:35,021 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 36 proven. 111 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:59:35,021 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:59:35,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:59:35,807 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 36 proven. 111 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:59:35,807 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [114671885] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:59:35,808 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [687816315] [2022-11-22 02:59:35,808 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:59:35,809 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:59:35,809 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:59:35,809 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:59:35,809 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:59:35,840 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:59:35,843 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:59:35,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:59:35,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:59:35,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:59:35,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:59:36,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:59:36,070 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:59:36,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:59:36,172 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:59:36,175 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:59:36,218 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:59:36,218 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:59:36,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:59:36,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:59:36,485 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:59:40,403 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '71720#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:59:40,403 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:59:40,404 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:59:40,404 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 42 [2022-11-22 02:59:40,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [446645324] [2022-11-22 02:59:40,404 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:59:40,404 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-11-22 02:59:40,404 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:59:40,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-11-22 02:59:40,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=275, Invalid=2805, Unknown=0, NotChecked=0, Total=3080 [2022-11-22 02:59:40,405 INFO L87 Difference]: Start difference. First operand 1304 states and 1489 transitions. Second operand has 43 states, 42 states have (on average 2.5952380952380953) internal successors, (109), 43 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:59:42,438 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:59:42,439 INFO L93 Difference]: Finished difference Result 1533 states and 1709 transitions. [2022-11-22 02:59:42,439 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-22 02:59:42,439 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 42 states have (on average 2.5952380952380953) internal successors, (109), 43 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-22 02:59:42,439 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:59:42,441 INFO L225 Difference]: With dead ends: 1533 [2022-11-22 02:59:42,441 INFO L226 Difference]: Without dead ends: 1533 [2022-11-22 02:59:42,441 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 112 SyntacticMatches, 8 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1732 ImplicationChecksByTransitivity, 6.2s TimeCoverageRelationStatistics Valid=932, Invalid=5548, Unknown=0, NotChecked=0, Total=6480 [2022-11-22 02:59:42,442 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 635 mSDsluCounter, 318 mSDsCounter, 0 mSdLazyCounter, 1374 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 635 SdHoareTripleChecker+Valid, 344 SdHoareTripleChecker+Invalid, 1393 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 1374 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:59:42,442 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [635 Valid, 344 Invalid, 1393 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 1374 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-22 02:59:42,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1533 states. [2022-11-22 02:59:42,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1533 to 1321. [2022-11-22 02:59:42,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1321 states, 1318 states have (on average 1.142640364188164) internal successors, (1506), 1320 states have internal predecessors, (1506), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:59:42,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1321 states to 1321 states and 1506 transitions. [2022-11-22 02:59:42,454 INFO L78 Accepts]: Start accepts. Automaton has 1321 states and 1506 transitions. Word has length 52 [2022-11-22 02:59:42,455 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:59:42,455 INFO L495 AbstractCegarLoop]: Abstraction has 1321 states and 1506 transitions. [2022-11-22 02:59:42,455 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 42 states have (on average 2.5952380952380953) internal successors, (109), 43 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:59:42,455 INFO L276 IsEmpty]: Start isEmpty. Operand 1321 states and 1506 transitions. [2022-11-22 02:59:42,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-22 02:59:42,457 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:59:42,457 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:59:42,462 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Forceful destruction successful, exit code 0 [2022-11-22 02:59:42,657 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable64,50 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:59:42,657 INFO L420 AbstractCegarLoop]: === Iteration 66 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 02:59:42,658 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:59:42,658 INFO L85 PathProgramCache]: Analyzing trace with hash -1851337329, now seen corresponding path program 4 times [2022-11-22 02:59:42,658 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:59:42,658 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1086433059] [2022-11-22 02:59:42,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:59:42,658 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:59:42,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:59:43,925 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 25 proven. 129 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:59:43,925 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:59:43,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1086433059] [2022-11-22 02:59:43,925 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1086433059] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:59:43,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1584332242] [2022-11-22 02:59:43,925 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:59:43,925 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:59:43,925 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:59:43,926 INFO L229 MonitoredProcess]: Starting monitored process 51 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:59:43,928 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Waiting until timeout for monitored process [2022-11-22 02:59:44,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:59:44,200 INFO L263 TraceCheckSpWp]: Trace formula consists of 434 conjuncts, 126 conjunts are in the unsatisfiable core [2022-11-22 02:59:44,202 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:59:44,277 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 02:59:44,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 02:59:46,401 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 36 proven. 118 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:59:46,401 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:59:48,413 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 49 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:59:48,413 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1584332242] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:59:48,413 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [216992019] [2022-11-22 02:59:48,414 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-22 02:59:48,414 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:59:48,414 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:59:48,415 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:59:48,415 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:59:48,462 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:59:48,467 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:59:48,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:59:48,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:59:48,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:59:48,567 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:59:48,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:59:48,686 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:59:48,686 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:59:48,773 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:59:48,775 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:59:48,820 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-22 02:59:48,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-22 02:59:48,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:59:49,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:59:49,190 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:59:54,090 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '75013#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:59:54,090 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:59:54,090 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:59:54,090 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 20, 20] total 62 [2022-11-22 02:59:54,090 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [164079439] [2022-11-22 02:59:54,091 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:59:54,091 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 64 states [2022-11-22 02:59:54,091 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:59:54,091 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2022-11-22 02:59:54,091 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=540, Invalid=5312, Unknown=0, NotChecked=0, Total=5852 [2022-11-22 02:59:54,092 INFO L87 Difference]: Start difference. First operand 1321 states and 1506 transitions. Second operand has 64 states, 63 states have (on average 2.5238095238095237) internal successors, (159), 63 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 03:00:11,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 03:00:11,901 INFO L93 Difference]: Finished difference Result 2122 states and 2326 transitions. [2022-11-22 03:00:11,901 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 101 states. [2022-11-22 03:00:11,901 INFO L78 Accepts]: Start accepts. Automaton has has 64 states, 63 states have (on average 2.5238095238095237) internal successors, (159), 63 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-22 03:00:11,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 03:00:11,903 INFO L225 Difference]: With dead ends: 2122 [2022-11-22 03:00:11,903 INFO L226 Difference]: Without dead ends: 2122 [2022-11-22 03:00:11,904 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 277 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 173 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8229 ImplicationChecksByTransitivity, 23.7s TimeCoverageRelationStatistics Valid=5429, Invalid=25021, Unknown=0, NotChecked=0, Total=30450 [2022-11-22 03:00:11,904 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 1749 mSDsluCounter, 325 mSDsCounter, 0 mSdLazyCounter, 2379 mSolverCounterSat, 140 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1749 SdHoareTripleChecker+Valid, 350 SdHoareTripleChecker+Invalid, 2519 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 140 IncrementalHoareTripleChecker+Valid, 2379 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-22 03:00:11,904 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1749 Valid, 350 Invalid, 2519 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [140 Valid, 2379 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-11-22 03:00:11,905 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2122 states. [2022-11-22 03:00:11,915 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2122 to 1327. [2022-11-22 03:00:11,916 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1327 states, 1324 states have (on average 1.142749244712991) internal successors, (1513), 1326 states have internal predecessors, (1513), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 03:00:11,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1327 states to 1327 states and 1513 transitions. [2022-11-22 03:00:11,918 INFO L78 Accepts]: Start accepts. Automaton has 1327 states and 1513 transitions. Word has length 53 [2022-11-22 03:00:11,918 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 03:00:11,919 INFO L495 AbstractCegarLoop]: Abstraction has 1327 states and 1513 transitions. [2022-11-22 03:00:11,919 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 64 states, 63 states have (on average 2.5238095238095237) internal successors, (159), 63 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 03:00:11,919 INFO L276 IsEmpty]: Start isEmpty. Operand 1327 states and 1513 transitions. [2022-11-22 03:00:11,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-22 03:00:11,921 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 03:00:11,921 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 03:00:11,931 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Forceful destruction successful, exit code 0 [2022-11-22 03:00:12,128 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable65,51 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 03:00:12,128 INFO L420 AbstractCegarLoop]: === Iteration 67 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 03:00:12,128 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 03:00:12,128 INFO L85 PathProgramCache]: Analyzing trace with hash -1109841487, now seen corresponding path program 8 times [2022-11-22 03:00:12,129 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 03:00:12,129 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [574566874] [2022-11-22 03:00:12,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 03:00:12,129 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 03:00:12,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 03:00:13,641 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 17 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 03:00:13,641 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 03:00:13,641 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [574566874] [2022-11-22 03:00:13,641 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [574566874] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 03:00:13,641 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1569499058] [2022-11-22 03:00:13,641 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 03:00:13,641 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 03:00:13,641 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 [2022-11-22 03:00:13,642 INFO L229 MonitoredProcess]: Starting monitored process 52 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 03:00:13,645 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Waiting until timeout for monitored process [2022-11-22 03:00:14,321 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-22 03:00:14,322 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 03:00:14,326 INFO L263 TraceCheckSpWp]: Trace formula consists of 402 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-22 03:00:14,327 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 03:00:14,418 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 03:00:14,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 03:00:16,474 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 25 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 03:00:16,475 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 03:00:19,035 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 45 proven. 63 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 03:00:19,035 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1569499058] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 03:00:19,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1220033963] [2022-11-22 03:00:19,036 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 03:00:19,036 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 03:00:19,036 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 03:00:19,037 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 03:00:19,037 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 03:00:19,079 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 03:00:19,082 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 03:00:19,082 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 03:00:19,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 03:00:19,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 03:00:19,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 03:00:19,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 03:00:19,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 03:00:19,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 03:00:19,336 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 03:00:19,380 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 03:00:19,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 03:00:19,584 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-22 03:00:19,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-22 03:00:19,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 03:00:19,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 03:00:19,914 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 03:00:25,484 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '79060#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 03:00:25,484 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 03:00:25,485 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 03:00:25,485 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 26, 25] total 75 [2022-11-22 03:00:25,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238060109] [2022-11-22 03:00:25,485 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 03:00:25,485 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 77 states [2022-11-22 03:00:25,485 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 03:00:25,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 77 interpolants. [2022-11-22 03:00:25,486 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=576, Invalid=7614, Unknown=0, NotChecked=0, Total=8190 [2022-11-22 03:00:25,486 INFO L87 Difference]: Start difference. First operand 1327 states and 1513 transitions. Second operand has 77 states, 76 states have (on average 2.0921052631578947) internal successors, (159), 76 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 03:00:56,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 03:00:56,205 INFO L93 Difference]: Finished difference Result 2911 states and 3129 transitions. [2022-11-22 03:00:56,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 152 states. [2022-11-22 03:00:56,206 INFO L78 Accepts]: Start accepts. Automaton has has 77 states, 76 states have (on average 2.0921052631578947) internal successors, (159), 76 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-22 03:00:56,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 03:00:56,209 INFO L225 Difference]: With dead ends: 2911 [2022-11-22 03:00:56,209 INFO L226 Difference]: Without dead ends: 2743 [2022-11-22 03:00:56,211 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 330 GetRequests, 91 SyntacticMatches, 1 SemanticMatches, 238 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15795 ImplicationChecksByTransitivity, 36.8s TimeCoverageRelationStatistics Valid=10276, Invalid=47084, Unknown=0, NotChecked=0, Total=57360 [2022-11-22 03:00:56,212 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 2859 mSDsluCounter, 733 mSDsCounter, 0 mSdLazyCounter, 4294 mSolverCounterSat, 166 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2859 SdHoareTripleChecker+Valid, 765 SdHoareTripleChecker+Invalid, 4460 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 166 IncrementalHoareTripleChecker+Valid, 4294 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2022-11-22 03:00:56,212 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2859 Valid, 765 Invalid, 4460 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [166 Valid, 4294 Invalid, 0 Unknown, 0 Unchecked, 3.6s Time] [2022-11-22 03:00:56,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2743 states. [2022-11-22 03:00:56,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2743 to 1347. [2022-11-22 03:00:56,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1347 states, 1344 states have (on average 1.140625) internal successors, (1533), 1346 states have internal predecessors, (1533), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 03:00:56,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1347 states to 1347 states and 1533 transitions. [2022-11-22 03:00:56,228 INFO L78 Accepts]: Start accepts. Automaton has 1347 states and 1533 transitions. Word has length 53 [2022-11-22 03:00:56,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 03:00:56,229 INFO L495 AbstractCegarLoop]: Abstraction has 1347 states and 1533 transitions. [2022-11-22 03:00:56,229 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 77 states, 76 states have (on average 2.0921052631578947) internal successors, (159), 76 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 03:00:56,229 INFO L276 IsEmpty]: Start isEmpty. Operand 1347 states and 1533 transitions. [2022-11-22 03:00:56,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-22 03:00:56,230 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 03:00:56,230 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 11, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 03:00:56,238 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Forceful destruction successful, exit code 0 [2022-11-22 03:00:56,430 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 52 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_19b70e2a-2c74-4a0e-a92b-4f77b71bda4f/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable66 [2022-11-22 03:00:56,431 INFO L420 AbstractCegarLoop]: === Iteration 68 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-22 03:00:56,431 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 03:00:56,431 INFO L85 PathProgramCache]: Analyzing trace with hash -277463926, now seen corresponding path program 5 times [2022-11-22 03:00:56,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 03:00:56,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [53258916] [2022-11-22 03:00:56,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 03:00:56,431 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 03:00:56,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat