./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 34885b99d6eef31987b044fabc3622fa239d5dff7e774ca124915f70431dc2b3 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-22 01:37:57,131 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-22 01:37:57,134 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-22 01:37:57,168 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-22 01:37:57,169 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-22 01:37:57,173 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-22 01:37:57,176 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-22 01:37:57,180 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-22 01:37:57,182 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-22 01:37:57,190 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-22 01:37:57,191 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-22 01:37:57,192 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-22 01:37:57,192 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-22 01:37:57,193 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-22 01:37:57,194 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-22 01:37:57,195 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-22 01:37:57,196 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-22 01:37:57,197 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-22 01:37:57,201 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-22 01:37:57,210 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-22 01:37:57,214 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-22 01:37:57,220 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-22 01:37:57,221 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-22 01:37:57,222 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-22 01:37:57,225 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-22 01:37:57,225 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-22 01:37:57,226 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-22 01:37:57,227 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-22 01:37:57,227 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-22 01:37:57,228 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-22 01:37:57,228 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-22 01:37:57,229 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-22 01:37:57,230 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-22 01:37:57,234 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-22 01:37:57,236 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-22 01:37:57,236 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-22 01:37:57,237 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-22 01:37:57,237 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-22 01:37:57,237 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-22 01:37:57,239 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-22 01:37:57,240 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-22 01:37:57,241 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-22 01:37:57,283 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-22 01:37:57,284 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-22 01:37:57,285 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-22 01:37:57,285 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-22 01:37:57,286 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-22 01:37:57,286 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-22 01:37:57,286 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-22 01:37:57,286 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-22 01:37:57,287 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-22 01:37:57,287 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-22 01:37:57,288 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-22 01:37:57,288 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-22 01:37:57,288 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-22 01:37:57,289 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-22 01:37:57,289 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-22 01:37:57,289 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-22 01:37:57,289 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-22 01:37:57,290 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-22 01:37:57,290 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-22 01:37:57,291 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-22 01:37:57,291 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-22 01:37:57,291 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-22 01:37:57,291 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-22 01:37:57,291 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-22 01:37:57,292 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-22 01:37:57,292 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-22 01:37:57,292 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-22 01:37:57,292 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-22 01:37:57,292 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-22 01:37:57,293 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-22 01:37:57,293 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-22 01:37:57,293 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-22 01:37:57,293 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-22 01:37:57,294 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-22 01:37:57,294 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-22 01:37:57,294 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 01:37:57,294 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-22 01:37:57,295 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-22 01:37:57,295 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-22 01:37:57,295 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-22 01:37:57,295 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-22 01:37:57,295 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-22 01:37:57,295 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 34885b99d6eef31987b044fabc3622fa239d5dff7e774ca124915f70431dc2b3 [2022-11-22 01:37:57,553 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-22 01:37:57,579 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-22 01:37:57,582 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-22 01:37:57,583 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-22 01:37:57,584 INFO L275 PluginConnector]: CDTParser initialized [2022-11-22 01:37:57,585 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i [2022-11-22 01:38:00,631 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-22 01:38:00,920 INFO L351 CDTParser]: Found 1 translation units. [2022-11-22 01:38:00,921 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i [2022-11-22 01:38:00,954 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/data/f512f4dab/aaec9d5b5ac546a98a23a36fdff82d1b/FLAG37ae110c8 [2022-11-22 01:38:00,976 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/data/f512f4dab/aaec9d5b5ac546a98a23a36fdff82d1b [2022-11-22 01:38:00,983 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-22 01:38:00,985 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-22 01:38:00,987 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-22 01:38:00,988 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-22 01:38:00,992 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-22 01:38:00,993 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 01:38:00" (1/1) ... [2022-11-22 01:38:00,994 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5c97d58c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:00, skipping insertion in model container [2022-11-22 01:38:00,995 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 01:38:00" (1/1) ... [2022-11-22 01:38:01,003 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-22 01:38:01,059 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-22 01:38:01,459 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 01:38:01,470 INFO L203 MainTranslator]: Completed pre-run [2022-11-22 01:38:01,534 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 01:38:01,563 INFO L208 MainTranslator]: Completed translation [2022-11-22 01:38:01,564 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01 WrapperNode [2022-11-22 01:38:01,564 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-22 01:38:01,566 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-22 01:38:01,566 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-22 01:38:01,566 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-22 01:38:01,575 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (1/1) ... [2022-11-22 01:38:01,609 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (1/1) ... [2022-11-22 01:38:01,642 INFO L138 Inliner]: procedures = 117, calls = 17, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 103 [2022-11-22 01:38:01,643 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-22 01:38:01,644 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-22 01:38:01,644 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-22 01:38:01,644 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-22 01:38:01,654 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (1/1) ... [2022-11-22 01:38:01,655 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (1/1) ... [2022-11-22 01:38:01,661 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (1/1) ... [2022-11-22 01:38:01,661 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (1/1) ... [2022-11-22 01:38:01,666 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (1/1) ... [2022-11-22 01:38:01,670 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (1/1) ... [2022-11-22 01:38:01,672 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (1/1) ... [2022-11-22 01:38:01,673 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (1/1) ... [2022-11-22 01:38:01,689 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-22 01:38:01,695 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-22 01:38:01,695 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-22 01:38:01,696 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-22 01:38:01,697 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (1/1) ... [2022-11-22 01:38:01,706 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 01:38:01,720 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:01,735 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-22 01:38:01,738 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-22 01:38:01,773 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-22 01:38:01,774 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-22 01:38:01,774 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-22 01:38:01,774 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-22 01:38:01,774 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-22 01:38:01,774 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-22 01:38:01,887 INFO L235 CfgBuilder]: Building ICFG [2022-11-22 01:38:01,890 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-22 01:38:02,158 INFO L276 CfgBuilder]: Performing block encoding [2022-11-22 01:38:02,308 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-22 01:38:02,314 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-22 01:38:02,317 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 01:38:02 BoogieIcfgContainer [2022-11-22 01:38:02,317 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-22 01:38:02,322 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-22 01:38:02,322 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-22 01:38:02,325 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-22 01:38:02,326 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.11 01:38:00" (1/3) ... [2022-11-22 01:38:02,328 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@633319ab and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 01:38:02, skipping insertion in model container [2022-11-22 01:38:02,328 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:38:01" (2/3) ... [2022-11-22 01:38:02,329 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@633319ab and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 01:38:02, skipping insertion in model container [2022-11-22 01:38:02,329 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 01:38:02" (3/3) ... [2022-11-22 01:38:02,334 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrncat-alloca-2.i [2022-11-22 01:38:02,355 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-22 01:38:02,355 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 17 error locations. [2022-11-22 01:38:02,423 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-22 01:38:02,429 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@23939845, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-22 01:38:02,430 INFO L358 AbstractCegarLoop]: Starting to check reachability of 17 error locations. [2022-11-22 01:38:02,434 INFO L276 IsEmpty]: Start isEmpty. Operand has 37 states, 19 states have (on average 2.3684210526315788) internal successors, (45), 36 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:02,441 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-22 01:38:02,441 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:02,442 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-22 01:38:02,443 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:02,448 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:02,448 INFO L85 PathProgramCache]: Analyzing trace with hash 163242, now seen corresponding path program 1 times [2022-11-22 01:38:02,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:02,460 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [483165437] [2022-11-22 01:38:02,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:02,461 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:02,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:02,626 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:02,627 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:02,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [483165437] [2022-11-22 01:38:02,628 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [483165437] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:02,628 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:38:02,628 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-22 01:38:02,630 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1040719962] [2022-11-22 01:38:02,655 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:02,665 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 01:38:02,666 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:02,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 01:38:02,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:38:02,698 INFO L87 Difference]: Start difference. First operand has 37 states, 19 states have (on average 2.3684210526315788) internal successors, (45), 36 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:02,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:02,817 INFO L93 Difference]: Finished difference Result 38 states and 44 transitions. [2022-11-22 01:38:02,819 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 01:38:02,821 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-22 01:38:02,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:02,828 INFO L225 Difference]: With dead ends: 38 [2022-11-22 01:38:02,832 INFO L226 Difference]: Without dead ends: 36 [2022-11-22 01:38:02,834 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:38:02,841 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 1 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:02,844 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 51 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:38:02,862 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-22 01:38:02,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-22 01:38:02,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:02,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-22 01:38:02,878 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 3 [2022-11-22 01:38:02,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:02,878 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-22 01:38:02,879 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:02,879 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-22 01:38:02,879 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 01:38:02,879 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:02,880 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 01:38:02,880 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-22 01:38:02,880 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:02,881 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:02,881 INFO L85 PathProgramCache]: Analyzing trace with hash 5059762, now seen corresponding path program 1 times [2022-11-22 01:38:02,881 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:02,882 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1613366053] [2022-11-22 01:38:02,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:02,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:02,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:03,141 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:03,142 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:03,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1613366053] [2022-11-22 01:38:03,143 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1613366053] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:03,143 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:38:03,143 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 01:38:03,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1451598749] [2022-11-22 01:38:03,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:03,145 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 01:38:03,145 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:03,145 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 01:38:03,146 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:38:03,146 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:03,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:03,207 INFO L93 Difference]: Finished difference Result 34 states and 39 transitions. [2022-11-22 01:38:03,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 01:38:03,208 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 01:38:03,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:03,209 INFO L225 Difference]: With dead ends: 34 [2022-11-22 01:38:03,210 INFO L226 Difference]: Without dead ends: 34 [2022-11-22 01:38:03,211 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:38:03,213 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 34 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:03,216 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 18 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:38:03,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-11-22 01:38:03,224 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2022-11-22 01:38:03,225 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 33 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:03,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 39 transitions. [2022-11-22 01:38:03,226 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 39 transitions. Word has length 4 [2022-11-22 01:38:03,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:03,226 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 39 transitions. [2022-11-22 01:38:03,226 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:03,227 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 39 transitions. [2022-11-22 01:38:03,228 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 01:38:03,228 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:03,228 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 01:38:03,228 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-22 01:38:03,229 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:03,229 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:03,229 INFO L85 PathProgramCache]: Analyzing trace with hash 5059763, now seen corresponding path program 1 times [2022-11-22 01:38:03,230 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:03,230 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [15933628] [2022-11-22 01:38:03,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:03,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:03,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:03,548 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:03,548 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:03,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [15933628] [2022-11-22 01:38:03,548 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [15933628] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:03,548 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:38:03,549 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:38:03,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1180583296] [2022-11-22 01:38:03,549 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:03,549 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:38:03,549 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:03,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:38:03,550 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:38:03,550 INFO L87 Difference]: Start difference. First operand 34 states and 39 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:03,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:03,685 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2022-11-22 01:38:03,686 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:38:03,686 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 01:38:03,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:03,687 INFO L225 Difference]: With dead ends: 65 [2022-11-22 01:38:03,687 INFO L226 Difference]: Without dead ends: 65 [2022-11-22 01:38:03,688 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-22 01:38:03,689 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 109 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:03,690 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [109 Valid, 49 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:38:03,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-22 01:38:03,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 36. [2022-11-22 01:38:03,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 21 states have (on average 2.0) internal successors, (42), 35 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:03,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 42 transitions. [2022-11-22 01:38:03,695 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 42 transitions. Word has length 4 [2022-11-22 01:38:03,696 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:03,696 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 42 transitions. [2022-11-22 01:38:03,696 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:03,696 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 42 transitions. [2022-11-22 01:38:03,697 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 01:38:03,697 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:03,697 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 01:38:03,697 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-22 01:38:03,698 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:03,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:03,698 INFO L85 PathProgramCache]: Analyzing trace with hash 156955998, now seen corresponding path program 1 times [2022-11-22 01:38:03,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:03,699 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1716852882] [2022-11-22 01:38:03,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:03,699 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:03,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:03,799 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:03,799 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:03,800 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1716852882] [2022-11-22 01:38:03,800 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1716852882] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:03,800 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:38:03,800 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 01:38:03,801 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [898138497] [2022-11-22 01:38:03,801 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:03,801 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:38:03,801 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:03,802 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:38:03,802 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:38:03,802 INFO L87 Difference]: Start difference. First operand 36 states and 42 transitions. Second operand has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:03,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:03,878 INFO L93 Difference]: Finished difference Result 62 states and 71 transitions. [2022-11-22 01:38:03,878 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:38:03,879 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 01:38:03,879 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:03,880 INFO L225 Difference]: With dead ends: 62 [2022-11-22 01:38:03,880 INFO L226 Difference]: Without dead ends: 62 [2022-11-22 01:38:03,880 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-22 01:38:03,881 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 130 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:03,882 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 74 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:38:03,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-22 01:38:03,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 37. [2022-11-22 01:38:03,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 22 states have (on average 1.9545454545454546) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:03,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-22 01:38:03,887 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 5 [2022-11-22 01:38:03,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:03,887 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-22 01:38:03,887 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:03,888 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-22 01:38:03,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 01:38:03,888 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:03,888 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 01:38:03,889 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-22 01:38:03,889 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:03,889 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:03,890 INFO L85 PathProgramCache]: Analyzing trace with hash 156958550, now seen corresponding path program 1 times [2022-11-22 01:38:03,890 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:03,890 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1868143150] [2022-11-22 01:38:03,890 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:03,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:03,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:04,066 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:04,067 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:04,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1868143150] [2022-11-22 01:38:04,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1868143150] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:04,067 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:38:04,068 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 01:38:04,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [609703179] [2022-11-22 01:38:04,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:04,069 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:38:04,069 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:04,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:38:04,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:38:04,070 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:04,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:04,119 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-11-22 01:38:04,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:38:04,120 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 01:38:04,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:04,120 INFO L225 Difference]: With dead ends: 37 [2022-11-22 01:38:04,120 INFO L226 Difference]: Without dead ends: 36 [2022-11-22 01:38:04,121 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:38:04,122 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 43 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:04,122 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 73 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:38:04,123 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-22 01:38:04,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-22 01:38:04,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:04,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-22 01:38:04,127 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 5 [2022-11-22 01:38:04,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:04,127 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-22 01:38:04,127 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:04,128 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-22 01:38:04,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-22 01:38:04,128 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:04,128 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-22 01:38:04,129 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-22 01:38:04,129 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:04,130 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:04,130 INFO L85 PathProgramCache]: Analyzing trace with hash 567552496, now seen corresponding path program 1 times [2022-11-22 01:38:04,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:04,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1501571658] [2022-11-22 01:38:04,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:04,131 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:04,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:04,501 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:04,501 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:04,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1501571658] [2022-11-22 01:38:04,501 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1501571658] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:04,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1645026547] [2022-11-22 01:38:04,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:04,502 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:04,502 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:04,509 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:04,517 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-22 01:38:04,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:04,598 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-22 01:38:04,604 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:04,724 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:04,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:38:04,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:38:04,877 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:04,877 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:38:05,027 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:38:05,037 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:05,037 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1645026547] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:38:05,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [275339498] [2022-11-22 01:38:05,057 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-22 01:38:05,057 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:38:05,061 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:38:05,067 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:38:05,067 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:38:05,149 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:05,153 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:05,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:38:05,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:38:05,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:05,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:05,458 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:38:05,950 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '525#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_#t~nondet14#1| 127) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet14#1|)) (= |#NULL.base| 0))' at error location [2022-11-22 01:38:05,950 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:38:05,950 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:38:05,951 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 11 [2022-11-22 01:38:05,951 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1528557052] [2022-11-22 01:38:05,951 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:38:05,951 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-22 01:38:05,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:05,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-22 01:38:05,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2022-11-22 01:38:05,952 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:06,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:06,309 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2022-11-22 01:38:06,310 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-22 01:38:06,310 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-22 01:38:06,310 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:06,310 INFO L225 Difference]: With dead ends: 65 [2022-11-22 01:38:06,311 INFO L226 Difference]: Without dead ends: 65 [2022-11-22 01:38:06,311 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 4 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-11-22 01:38:06,312 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 142 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:06,312 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 112 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:38:06,313 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-22 01:38:06,315 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 34. [2022-11-22 01:38:06,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 20 states have (on average 1.95) internal successors, (39), 33 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:06,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 39 transitions. [2022-11-22 01:38:06,316 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 39 transitions. Word has length 6 [2022-11-22 01:38:06,317 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:06,317 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 39 transitions. [2022-11-22 01:38:06,317 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:06,317 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 39 transitions. [2022-11-22 01:38:06,318 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 01:38:06,318 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:06,318 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:06,329 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-22 01:38:06,524 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:06,525 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:06,525 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:06,525 INFO L85 PathProgramCache]: Analyzing trace with hash 414361537, now seen corresponding path program 1 times [2022-11-22 01:38:06,525 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:06,525 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [569734219] [2022-11-22 01:38:06,525 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:06,525 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:06,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:06,580 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:38:06,580 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:06,580 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [569734219] [2022-11-22 01:38:06,581 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [569734219] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:06,581 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:38:06,581 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 01:38:06,581 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [814859167] [2022-11-22 01:38:06,581 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:06,582 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 01:38:06,582 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:06,582 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 01:38:06,583 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:38:06,583 INFO L87 Difference]: Start difference. First operand 34 states and 39 transitions. Second operand has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:06,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:06,617 INFO L93 Difference]: Finished difference Result 32 states and 37 transitions. [2022-11-22 01:38:06,618 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 01:38:06,618 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 01:38:06,618 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:06,619 INFO L225 Difference]: With dead ends: 32 [2022-11-22 01:38:06,619 INFO L226 Difference]: Without dead ends: 32 [2022-11-22 01:38:06,619 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:38:06,620 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 28 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:06,621 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 17 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:38:06,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-11-22 01:38:06,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 32. [2022-11-22 01:38:06,631 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 20 states have (on average 1.85) internal successors, (37), 31 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:06,632 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 37 transitions. [2022-11-22 01:38:06,632 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 37 transitions. Word has length 7 [2022-11-22 01:38:06,632 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:06,635 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 37 transitions. [2022-11-22 01:38:06,635 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:06,636 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 37 transitions. [2022-11-22 01:38:06,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 01:38:06,637 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:06,637 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:06,637 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-22 01:38:06,637 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:06,638 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:06,639 INFO L85 PathProgramCache]: Analyzing trace with hash 414361538, now seen corresponding path program 1 times [2022-11-22 01:38:06,639 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:06,639 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [585476225] [2022-11-22 01:38:06,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:06,640 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:06,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:06,808 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:06,808 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:06,809 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [585476225] [2022-11-22 01:38:06,809 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [585476225] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:06,809 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [145880003] [2022-11-22 01:38:06,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:06,810 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:06,810 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:06,811 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:06,835 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-22 01:38:06,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:06,880 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-22 01:38:06,881 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:06,971 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:06,971 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:38:07,041 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:07,042 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [145880003] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:38:07,042 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [115294568] [2022-11-22 01:38:07,044 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-22 01:38:07,044 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:38:07,045 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:38:07,045 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:38:07,045 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:38:07,112 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:07,116 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:07,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:38:07,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:07,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:07,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:07,372 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:38:08,220 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '751#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (not (< (+ |ULTIMATE.start_main_~i~0#1| 1) |ULTIMATE.start_main_~length1~0#1|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (< (+ |ULTIMATE.start_main_~i~1#1| 1) |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-22 01:38:08,220 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:38:08,220 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:38:08,220 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 11 [2022-11-22 01:38:08,220 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [830908973] [2022-11-22 01:38:08,220 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:38:08,221 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-22 01:38:08,221 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:08,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-22 01:38:08,221 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=240, Unknown=0, NotChecked=0, Total=306 [2022-11-22 01:38:08,222 INFO L87 Difference]: Start difference. First operand 32 states and 37 transitions. Second operand has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:08,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:08,371 INFO L93 Difference]: Finished difference Result 60 states and 69 transitions. [2022-11-22 01:38:08,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-22 01:38:08,372 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 01:38:08,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:08,373 INFO L225 Difference]: With dead ends: 60 [2022-11-22 01:38:08,373 INFO L226 Difference]: Without dead ends: 60 [2022-11-22 01:38:08,373 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 7 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 109 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=105, Invalid=401, Unknown=0, NotChecked=0, Total=506 [2022-11-22 01:38:08,374 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 210 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 210 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 84 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:08,374 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [210 Valid, 132 Invalid, 84 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:38:08,375 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2022-11-22 01:38:08,377 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 35. [2022-11-22 01:38:08,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 23 states have (on average 1.7826086956521738) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:08,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-11-22 01:38:08,378 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 7 [2022-11-22 01:38:08,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:08,378 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-11-22 01:38:08,378 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:08,379 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-11-22 01:38:08,379 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 01:38:08,379 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:08,379 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:08,391 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-22 01:38:08,585 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:08,585 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:08,586 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:08,586 INFO L85 PathProgramCache]: Analyzing trace with hash 414364089, now seen corresponding path program 1 times [2022-11-22 01:38:08,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:08,586 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [328433815] [2022-11-22 01:38:08,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:08,586 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:08,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:08,723 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:08,723 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:08,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [328433815] [2022-11-22 01:38:08,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [328433815] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:08,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [88387164] [2022-11-22 01:38:08,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:08,724 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:08,724 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:08,725 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:08,746 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-22 01:38:08,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:08,796 INFO L263 TraceCheckSpWp]: Trace formula consists of 73 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-22 01:38:08,797 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:08,897 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:08,898 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-22 01:38:08,898 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [88387164] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:08,898 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-22 01:38:08,898 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 7 [2022-11-22 01:38:08,899 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1616944034] [2022-11-22 01:38:08,899 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:08,899 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 01:38:08,899 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:08,900 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 01:38:08,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-22 01:38:08,900 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:08,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:08,974 INFO L93 Difference]: Finished difference Result 34 states and 40 transitions. [2022-11-22 01:38:08,975 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:38:08,975 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 01:38:08,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:08,975 INFO L225 Difference]: With dead ends: 34 [2022-11-22 01:38:08,975 INFO L226 Difference]: Without dead ends: 34 [2022-11-22 01:38:08,976 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2022-11-22 01:38:08,976 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 96 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:08,977 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 13 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:38:08,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-11-22 01:38:08,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2022-11-22 01:38:08,979 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 23 states have (on average 1.7391304347826086) internal successors, (40), 33 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:08,980 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 40 transitions. [2022-11-22 01:38:08,980 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 40 transitions. Word has length 7 [2022-11-22 01:38:08,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:08,980 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 40 transitions. [2022-11-22 01:38:08,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:08,981 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 40 transitions. [2022-11-22 01:38:08,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-22 01:38:08,981 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:08,981 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:08,995 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-11-22 01:38:09,187 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:09,187 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:09,187 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:09,187 INFO L85 PathProgramCache]: Analyzing trace with hash -39615125, now seen corresponding path program 1 times [2022-11-22 01:38:09,188 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:09,188 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [12482951] [2022-11-22 01:38:09,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:09,188 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:09,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:09,471 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:09,471 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:09,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [12482951] [2022-11-22 01:38:09,471 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [12482951] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:09,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [394297573] [2022-11-22 01:38:09,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:09,472 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:09,472 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:09,473 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:09,504 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-22 01:38:09,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:09,552 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 12 conjunts are in the unsatisfiable core [2022-11-22 01:38:09,554 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:09,589 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:38:09,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:38:09,690 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:38:09,690 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-22 01:38:09,690 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [394297573] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:09,691 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-22 01:38:09,691 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 8 [2022-11-22 01:38:09,691 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1374079997] [2022-11-22 01:38:09,691 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:09,691 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 01:38:09,692 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:09,692 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 01:38:09,692 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-22 01:38:09,692 INFO L87 Difference]: Start difference. First operand 34 states and 40 transitions. Second operand has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:09,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:09,786 INFO L93 Difference]: Finished difference Result 59 states and 69 transitions. [2022-11-22 01:38:09,787 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 01:38:09,787 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-22 01:38:09,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:09,787 INFO L225 Difference]: With dead ends: 59 [2022-11-22 01:38:09,788 INFO L226 Difference]: Without dead ends: 59 [2022-11-22 01:38:09,788 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=68, Unknown=0, NotChecked=0, Total=110 [2022-11-22 01:38:09,788 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 115 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:09,789 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 42 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:38:09,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-22 01:38:09,791 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 37. [2022-11-22 01:38:09,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 26 states have (on average 1.6923076923076923) internal successors, (44), 36 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:09,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 44 transitions. [2022-11-22 01:38:09,792 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 44 transitions. Word has length 8 [2022-11-22 01:38:09,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:09,792 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 44 transitions. [2022-11-22 01:38:09,792 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:09,792 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 44 transitions. [2022-11-22 01:38:09,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-22 01:38:09,792 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:09,793 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1] [2022-11-22 01:38:09,804 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-22 01:38:09,993 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-22 01:38:09,993 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:09,994 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:09,994 INFO L85 PathProgramCache]: Analyzing trace with hash -1327018651, now seen corresponding path program 2 times [2022-11-22 01:38:09,994 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:09,994 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1193307027] [2022-11-22 01:38:09,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:09,994 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:10,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:10,346 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:10,346 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:10,346 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1193307027] [2022-11-22 01:38:10,346 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1193307027] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:10,346 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [434146876] [2022-11-22 01:38:10,347 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:38:10,347 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:10,347 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:10,348 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:10,378 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-22 01:38:10,428 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2022-11-22 01:38:10,428 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:38:10,429 INFO L263 TraceCheckSpWp]: Trace formula consists of 62 conjuncts, 14 conjunts are in the unsatisfiable core [2022-11-22 01:38:10,431 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:10,481 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:38:10,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:38:10,618 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:38:10,619 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-22 01:38:10,619 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [434146876] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:10,619 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-22 01:38:10,619 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 9 [2022-11-22 01:38:10,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1842854974] [2022-11-22 01:38:10,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:10,622 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 01:38:10,623 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:10,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 01:38:10,623 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2022-11-22 01:38:10,624 INFO L87 Difference]: Start difference. First operand 37 states and 44 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:10,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:10,725 INFO L93 Difference]: Finished difference Result 57 states and 67 transitions. [2022-11-22 01:38:10,726 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 01:38:10,726 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-22 01:38:10,726 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:10,726 INFO L225 Difference]: With dead ends: 57 [2022-11-22 01:38:10,726 INFO L226 Difference]: Without dead ends: 57 [2022-11-22 01:38:10,727 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=38, Invalid=94, Unknown=0, NotChecked=0, Total=132 [2022-11-22 01:38:10,727 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 88 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:10,728 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 42 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:38:10,728 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-22 01:38:10,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 35. [2022-11-22 01:38:10,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 25 states have (on average 1.68) internal successors, (42), 34 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:10,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 42 transitions. [2022-11-22 01:38:10,730 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 42 transitions. Word has length 9 [2022-11-22 01:38:10,730 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:10,730 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 42 transitions. [2022-11-22 01:38:10,730 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:10,731 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 42 transitions. [2022-11-22 01:38:10,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-22 01:38:10,731 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:10,731 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:10,742 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-22 01:38:10,931 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:10,932 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:10,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:10,932 INFO L85 PathProgramCache]: Analyzing trace with hash 584631406, now seen corresponding path program 1 times [2022-11-22 01:38:10,932 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:10,932 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [399998882] [2022-11-22 01:38:10,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:10,933 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:10,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:11,019 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:11,019 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:11,019 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [399998882] [2022-11-22 01:38:11,020 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [399998882] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:11,020 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:38:11,020 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 01:38:11,020 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1341822040] [2022-11-22 01:38:11,020 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:11,022 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:38:11,022 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:11,022 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:38:11,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:38:11,023 INFO L87 Difference]: Start difference. First operand 35 states and 42 transitions. Second operand has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:11,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:11,087 INFO L93 Difference]: Finished difference Result 33 states and 40 transitions. [2022-11-22 01:38:11,087 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:38:11,087 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-22 01:38:11,088 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:11,088 INFO L225 Difference]: With dead ends: 33 [2022-11-22 01:38:11,088 INFO L226 Difference]: Without dead ends: 33 [2022-11-22 01:38:11,089 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-22 01:38:11,090 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 55 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:11,090 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 19 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:38:11,091 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-11-22 01:38:11,092 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 32. [2022-11-22 01:38:11,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 25 states have (on average 1.56) internal successors, (39), 31 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:11,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 39 transitions. [2022-11-22 01:38:11,094 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 39 transitions. Word has length 10 [2022-11-22 01:38:11,094 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:11,094 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 39 transitions. [2022-11-22 01:38:11,094 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:11,095 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 39 transitions. [2022-11-22 01:38:11,096 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-22 01:38:11,096 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:11,096 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:11,096 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-22 01:38:11,097 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:11,098 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:11,098 INFO L85 PathProgramCache]: Analyzing trace with hash 584631407, now seen corresponding path program 1 times [2022-11-22 01:38:11,098 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:11,098 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2071489359] [2022-11-22 01:38:11,099 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:11,099 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:11,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:11,260 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:11,260 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:11,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2071489359] [2022-11-22 01:38:11,261 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2071489359] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:11,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1987192186] [2022-11-22 01:38:11,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:11,261 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:11,262 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:11,263 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:11,294 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-22 01:38:11,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:11,356 INFO L263 TraceCheckSpWp]: Trace formula consists of 118 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-22 01:38:11,357 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:11,564 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:11,564 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:38:11,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-22 01:38:11,819 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:11,819 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1987192186] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:38:11,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1523756678] [2022-11-22 01:38:11,823 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-22 01:38:11,823 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:38:11,823 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:38:11,823 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:38:11,824 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:38:11,872 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:11,878 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:11,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:38:11,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:38:11,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:12,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:12,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:38:12,148 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:38:12,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:38:12,205 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:38:14,011 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1523756678] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:14,012 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:38:14,012 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [5, 8, 8] total 25 [2022-11-22 01:38:14,012 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1347318565] [2022-11-22 01:38:14,013 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:14,013 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-22 01:38:14,013 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:14,013 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-22 01:38:14,014 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-11-22 01:38:14,014 INFO L87 Difference]: Start difference. First operand 32 states and 39 transitions. Second operand has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:14,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:14,196 INFO L93 Difference]: Finished difference Result 58 states and 69 transitions. [2022-11-22 01:38:14,196 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-22 01:38:14,197 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-22 01:38:14,197 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:14,197 INFO L225 Difference]: With dead ends: 58 [2022-11-22 01:38:14,197 INFO L226 Difference]: Without dead ends: 58 [2022-11-22 01:38:14,198 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 8 SyntacticMatches, 1 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 127 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-11-22 01:38:14,198 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 113 mSDsluCounter, 41 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:14,199 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [113 Valid, 49 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:38:14,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-11-22 01:38:14,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 36. [2022-11-22 01:38:14,200 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 29 states have (on average 1.4827586206896552) internal successors, (43), 35 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:14,201 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 43 transitions. [2022-11-22 01:38:14,201 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 43 transitions. Word has length 10 [2022-11-22 01:38:14,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:14,201 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 43 transitions. [2022-11-22 01:38:14,201 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:14,201 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 43 transitions. [2022-11-22 01:38:14,202 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 01:38:14,202 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:14,202 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1] [2022-11-22 01:38:14,213 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-22 01:38:14,408 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:14,409 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:14,409 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:14,409 INFO L85 PathProgramCache]: Analyzing trace with hash 340436050, now seen corresponding path program 1 times [2022-11-22 01:38:14,409 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:14,409 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1050608082] [2022-11-22 01:38:14,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:14,410 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:14,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:14,595 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 1 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:14,596 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:14,596 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1050608082] [2022-11-22 01:38:14,596 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1050608082] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:14,596 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [943707994] [2022-11-22 01:38:14,596 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:14,597 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:14,597 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:14,598 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:14,604 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-22 01:38:14,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:14,679 INFO L263 TraceCheckSpWp]: Trace formula consists of 101 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-22 01:38:14,680 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:14,813 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:14,813 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:38:14,907 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:14,908 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [943707994] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:38:14,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2099068191] [2022-11-22 01:38:14,912 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-22 01:38:14,913 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:38:14,913 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:38:14,913 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:38:14,913 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:38:14,957 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:14,960 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:14,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:38:15,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:38:15,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:15,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:15,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:15,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:15,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:15,281 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:38:15,983 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1544#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:38:15,983 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:38:15,983 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:38:15,983 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 16 [2022-11-22 01:38:15,983 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [584897189] [2022-11-22 01:38:15,984 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:38:15,984 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-22 01:38:15,984 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:15,984 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-22 01:38:15,985 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=405, Unknown=0, NotChecked=0, Total=506 [2022-11-22 01:38:15,985 INFO L87 Difference]: Start difference. First operand 36 states and 43 transitions. Second operand has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:16,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:16,279 INFO L93 Difference]: Finished difference Result 101 states and 117 transitions. [2022-11-22 01:38:16,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-22 01:38:16,279 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 01:38:16,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:16,280 INFO L225 Difference]: With dead ends: 101 [2022-11-22 01:38:16,280 INFO L226 Difference]: Without dead ends: 101 [2022-11-22 01:38:16,281 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 15 SyntacticMatches, 2 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=207, Invalid=785, Unknown=0, NotChecked=0, Total=992 [2022-11-22 01:38:16,281 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 353 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 353 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 166 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:16,281 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [353 Valid, 291 Invalid, 166 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:38:16,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2022-11-22 01:38:16,284 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 41. [2022-11-22 01:38:16,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 40 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:16,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 50 transitions. [2022-11-22 01:38:16,285 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 50 transitions. Word has length 11 [2022-11-22 01:38:16,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:16,285 INFO L495 AbstractCegarLoop]: Abstraction has 41 states and 50 transitions. [2022-11-22 01:38:16,285 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:16,285 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 50 transitions. [2022-11-22 01:38:16,286 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-22 01:38:16,286 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:16,286 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:16,295 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-22 01:38:16,492 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-22 01:38:16,492 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:16,493 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:16,493 INFO L85 PathProgramCache]: Analyzing trace with hash -809932952, now seen corresponding path program 1 times [2022-11-22 01:38:16,493 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:16,493 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1157977451] [2022-11-22 01:38:16,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:16,494 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:16,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:16,915 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:16,915 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:16,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1157977451] [2022-11-22 01:38:16,915 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1157977451] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:16,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1429831165] [2022-11-22 01:38:16,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:16,916 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:16,916 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:16,917 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:16,942 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-22 01:38:17,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:17,020 INFO L263 TraceCheckSpWp]: Trace formula consists of 129 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-22 01:38:17,023 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:17,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:38:17,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:38:17,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:38:17,489 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:38:17,492 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:38:17,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 10 [2022-11-22 01:38:17,517 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:17,517 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:38:17,666 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:38:17,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 25 [2022-11-22 01:38:17,675 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:38:17,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 36 treesize of output 32 [2022-11-22 01:38:17,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 01:38:17,991 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:38:18,007 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:18,008 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1429831165] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:38:18,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [434035520] [2022-11-22 01:38:18,010 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 01:38:18,010 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:38:18,010 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:38:18,011 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:38:18,011 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:38:18,051 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:18,055 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:18,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:38:18,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:38:18,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:18,196 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:18,269 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:38:18,333 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:38:18,333 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:38:18,604 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:38:21,412 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1802#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-22 01:38:21,412 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:38:21,413 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:38:21,413 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 10, 10] total 26 [2022-11-22 01:38:21,413 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1717340688] [2022-11-22 01:38:21,413 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:38:21,413 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-22 01:38:21,414 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:21,414 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-22 01:38:21,414 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=1068, Unknown=0, NotChecked=0, Total=1190 [2022-11-22 01:38:21,415 INFO L87 Difference]: Start difference. First operand 41 states and 50 transitions. Second operand has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:23,935 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:23,935 INFO L93 Difference]: Finished difference Result 108 states and 121 transitions. [2022-11-22 01:38:23,936 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-22 01:38:23,936 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-22 01:38:23,936 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:23,937 INFO L225 Difference]: With dead ends: 108 [2022-11-22 01:38:23,937 INFO L226 Difference]: Without dead ends: 108 [2022-11-22 01:38:23,938 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 662 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=521, Invalid=2785, Unknown=0, NotChecked=0, Total=3306 [2022-11-22 01:38:23,939 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 458 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 500 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 458 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 529 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 500 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:23,939 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [458 Valid, 198 Invalid, 529 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 500 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-22 01:38:23,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-11-22 01:38:23,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 59. [2022-11-22 01:38:23,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 52 states have (on average 1.4807692307692308) internal successors, (77), 58 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:23,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 77 transitions. [2022-11-22 01:38:23,943 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 77 transitions. Word has length 12 [2022-11-22 01:38:23,943 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:23,943 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 77 transitions. [2022-11-22 01:38:23,944 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:23,944 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 77 transitions. [2022-11-22 01:38:23,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-22 01:38:23,944 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:23,945 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 1, 1, 1, 1, 1] [2022-11-22 01:38:23,958 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-22 01:38:24,150 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:24,150 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:24,151 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:24,151 INFO L85 PathProgramCache]: Analyzing trace with hash -1868709771, now seen corresponding path program 2 times [2022-11-22 01:38:24,151 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:24,151 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1054873703] [2022-11-22 01:38:24,151 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:24,151 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:24,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:24,429 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:38:24,429 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:24,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1054873703] [2022-11-22 01:38:24,430 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1054873703] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:24,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [96728942] [2022-11-22 01:38:24,430 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:38:24,430 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:24,430 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:24,451 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:24,499 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-22 01:38:24,563 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-22 01:38:24,563 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:38:24,564 INFO L263 TraceCheckSpWp]: Trace formula consists of 88 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-22 01:38:24,568 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:24,636 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 01:38:24,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 01:38:24,858 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:38:24,858 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:38:25,135 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:38:25,136 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [96728942] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:38:25,136 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [747919310] [2022-11-22 01:38:25,138 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-22 01:38:25,138 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:38:25,138 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:38:25,139 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:38:25,139 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:38:25,188 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:25,192 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:25,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:38:25,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:25,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:25,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:25,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:38:25,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:25,528 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:25,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:25,576 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:38:26,319 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2113#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:38:26,319 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:38:26,319 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:38:26,319 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-11-22 01:38:26,319 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1572443847] [2022-11-22 01:38:26,320 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:38:26,320 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-22 01:38:26,320 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:26,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-22 01:38:26,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=107, Invalid=399, Unknown=0, NotChecked=0, Total=506 [2022-11-22 01:38:26,321 INFO L87 Difference]: Start difference. First operand 59 states and 77 transitions. Second operand has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:26,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:26,756 INFO L93 Difference]: Finished difference Result 122 states and 164 transitions. [2022-11-22 01:38:26,757 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-22 01:38:26,757 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-22 01:38:26,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:26,758 INFO L225 Difference]: With dead ends: 122 [2022-11-22 01:38:26,758 INFO L226 Difference]: Without dead ends: 122 [2022-11-22 01:38:26,758 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 165 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=194, Invalid=618, Unknown=0, NotChecked=0, Total=812 [2022-11-22 01:38:26,759 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 344 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 169 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 344 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 174 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:26,759 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [344 Valid, 96 Invalid, 174 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 169 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:38:26,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122 states. [2022-11-22 01:38:26,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122 to 57. [2022-11-22 01:38:26,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 51 states have (on average 1.4705882352941178) internal successors, (75), 56 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:26,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 75 transitions. [2022-11-22 01:38:26,763 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 75 transitions. Word has length 13 [2022-11-22 01:38:26,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:26,763 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 75 transitions. [2022-11-22 01:38:26,764 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:26,764 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 75 transitions. [2022-11-22 01:38:26,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-22 01:38:26,764 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:26,764 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:26,769 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-22 01:38:26,969 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:26,970 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:26,970 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:26,970 INFO L85 PathProgramCache]: Analyzing trace with hash 661880773, now seen corresponding path program 1 times [2022-11-22 01:38:26,970 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:26,971 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1292107194] [2022-11-22 01:38:26,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:26,971 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:26,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:27,031 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:38:27,031 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:27,031 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1292107194] [2022-11-22 01:38:27,031 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1292107194] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:27,032 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:38:27,032 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 01:38:27,032 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [608586960] [2022-11-22 01:38:27,032 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:27,033 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:38:27,033 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:27,033 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:38:27,033 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:38:27,033 INFO L87 Difference]: Start difference. First operand 57 states and 75 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:27,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:27,087 INFO L93 Difference]: Finished difference Result 57 states and 73 transitions. [2022-11-22 01:38:27,087 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:38:27,088 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-22 01:38:27,088 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:27,088 INFO L225 Difference]: With dead ends: 57 [2022-11-22 01:38:27,088 INFO L226 Difference]: Without dead ends: 57 [2022-11-22 01:38:27,089 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-22 01:38:27,089 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 33 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:27,090 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 28 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:38:27,090 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-22 01:38:27,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 56. [2022-11-22 01:38:27,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 51 states have (on average 1.411764705882353) internal successors, (72), 55 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:27,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2022-11-22 01:38:27,103 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 13 [2022-11-22 01:38:27,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:27,106 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2022-11-22 01:38:27,106 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:27,106 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2022-11-22 01:38:27,107 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-22 01:38:27,109 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:27,109 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:27,109 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-11-22 01:38:27,109 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:27,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:27,110 INFO L85 PathProgramCache]: Analyzing trace with hash 661880774, now seen corresponding path program 1 times [2022-11-22 01:38:27,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:27,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1546574263] [2022-11-22 01:38:27,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:27,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:27,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:27,307 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:38:27,307 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:27,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1546574263] [2022-11-22 01:38:27,308 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1546574263] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:27,308 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:38:27,308 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-22 01:38:27,308 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1582749121] [2022-11-22 01:38:27,308 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:27,309 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 01:38:27,309 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:27,309 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 01:38:27,309 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-22 01:38:27,310 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:27,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:27,420 INFO L93 Difference]: Finished difference Result 65 states and 82 transitions. [2022-11-22 01:38:27,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 01:38:27,421 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-22 01:38:27,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:27,423 INFO L225 Difference]: With dead ends: 65 [2022-11-22 01:38:27,423 INFO L226 Difference]: Without dead ends: 65 [2022-11-22 01:38:27,423 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=47, Unknown=0, NotChecked=0, Total=72 [2022-11-22 01:38:27,424 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 58 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 23 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:27,424 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 23 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:38:27,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-22 01:38:27,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 60. [2022-11-22 01:38:27,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 55 states have (on average 1.3636363636363635) internal successors, (75), 59 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:27,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 75 transitions. [2022-11-22 01:38:27,427 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 75 transitions. Word has length 13 [2022-11-22 01:38:27,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:27,427 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 75 transitions. [2022-11-22 01:38:27,428 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:27,428 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 75 transitions. [2022-11-22 01:38:27,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-22 01:38:27,428 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:27,428 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:27,428 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-11-22 01:38:27,428 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:27,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:27,429 INFO L85 PathProgramCache]: Analyzing trace with hash 2003282293, now seen corresponding path program 1 times [2022-11-22 01:38:27,429 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:27,429 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1686474668] [2022-11-22 01:38:27,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:27,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:27,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:27,726 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:27,730 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:27,731 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1686474668] [2022-11-22 01:38:27,731 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1686474668] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:27,731 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [951356661] [2022-11-22 01:38:27,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:27,732 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:27,732 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:27,733 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:27,737 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-22 01:38:27,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:27,839 INFO L263 TraceCheckSpWp]: Trace formula consists of 148 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-22 01:38:27,841 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:27,972 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_279 Int) (|v_ULTIMATE.start_main_#t~malloc11#1.base_21| Int) (|v_ULTIMATE.start_main_#t~malloc12#1.base_21| Int)) (let ((.cse0 (store |c_ULTIMATE.start_main_old_#valid#1| |v_ULTIMATE.start_main_#t~malloc11#1.base_21| 1))) (and (= |c_#valid| (store (store (store .cse0 |v_ULTIMATE.start_main_#t~malloc12#1.base_21| v_ArrVal_279) |v_ULTIMATE.start_main_#t~malloc11#1.base_21| 0) |v_ULTIMATE.start_main_#t~malloc12#1.base_21| 0)) (= (select |c_ULTIMATE.start_main_old_#valid#1| |v_ULTIMATE.start_main_#t~malloc11#1.base_21|) 0) (= (select .cse0 |v_ULTIMATE.start_main_#t~malloc12#1.base_21|) 0)))) is different from true [2022-11-22 01:38:27,973 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-22 01:38:27,973 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-22 01:38:27,973 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [951356661] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:27,973 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-22 01:38:27,974 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 11 [2022-11-22 01:38:27,974 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [511044426] [2022-11-22 01:38:27,974 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:27,974 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:38:27,975 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:27,975 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:38:27,975 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=80, Unknown=1, NotChecked=18, Total=132 [2022-11-22 01:38:27,975 INFO L87 Difference]: Start difference. First operand 60 states and 75 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:28,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:28,029 INFO L93 Difference]: Finished difference Result 59 states and 74 transitions. [2022-11-22 01:38:28,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:38:28,030 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-22 01:38:28,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:28,030 INFO L225 Difference]: With dead ends: 59 [2022-11-22 01:38:28,030 INFO L226 Difference]: Without dead ends: 56 [2022-11-22 01:38:28,031 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=99, Unknown=1, NotChecked=20, Total=156 [2022-11-22 01:38:28,031 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 16 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 27 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:28,032 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 28 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 28 Invalid, 0 Unknown, 27 Unchecked, 0.0s Time] [2022-11-22 01:38:28,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-11-22 01:38:28,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 52. [2022-11-22 01:38:28,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 48 states have (on average 1.2916666666666667) internal successors, (62), 51 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:28,034 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 62 transitions. [2022-11-22 01:38:28,034 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 62 transitions. Word has length 15 [2022-11-22 01:38:28,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:28,035 INFO L495 AbstractCegarLoop]: Abstraction has 52 states and 62 transitions. [2022-11-22 01:38:28,035 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:28,035 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 62 transitions. [2022-11-22 01:38:28,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-22 01:38:28,036 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:28,036 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:28,047 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-22 01:38:28,242 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:28,242 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:28,242 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:28,242 INFO L85 PathProgramCache]: Analyzing trace with hash -1835762402, now seen corresponding path program 2 times [2022-11-22 01:38:28,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:28,243 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1029520189] [2022-11-22 01:38:28,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:28,243 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:28,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:28,728 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:28,728 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:28,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1029520189] [2022-11-22 01:38:28,728 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1029520189] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:28,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [603736258] [2022-11-22 01:38:28,728 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:38:28,729 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:28,729 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:28,731 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:28,739 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-22 01:38:28,841 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 01:38:28,841 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:38:28,843 INFO L263 TraceCheckSpWp]: Trace formula consists of 153 conjuncts, 47 conjunts are in the unsatisfiable core [2022-11-22 01:38:28,845 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:28,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:38:29,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:38:29,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:38:29,469 INFO L321 Elim1Store]: treesize reduction 11, result has 47.6 percent of original size [2022-11-22 01:38:29,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 20 [2022-11-22 01:38:29,500 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 3 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:29,500 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:38:29,750 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:38:29,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 51 treesize of output 37 [2022-11-22 01:38:29,763 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:38:29,764 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 61 treesize of output 61 [2022-11-22 01:38:29,787 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:38:29,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 15 [2022-11-22 01:38:30,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:38:30,257 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:30,257 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [603736258] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:38:30,257 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1476129455] [2022-11-22 01:38:30,259 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 01:38:30,260 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:38:30,260 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:38:30,260 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:38:30,260 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:38:30,308 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:30,311 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:30,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:38:30,372 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:38:30,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:30,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:30,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:38:30,586 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:38:30,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:38:30,820 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:38:33,539 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2860#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-22 01:38:33,540 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:38:33,540 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:38:33,540 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 13, 13] total 34 [2022-11-22 01:38:33,540 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [941255524] [2022-11-22 01:38:33,540 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:38:33,541 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-22 01:38:33,541 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:33,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-22 01:38:33,542 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=160, Invalid=1646, Unknown=0, NotChecked=0, Total=1806 [2022-11-22 01:38:33,543 INFO L87 Difference]: Start difference. First operand 52 states and 62 transitions. Second operand has 34 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 34 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:38,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:38,314 INFO L93 Difference]: Finished difference Result 119 states and 135 transitions. [2022-11-22 01:38:38,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-22 01:38:38,314 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 34 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-22 01:38:38,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:38,315 INFO L225 Difference]: With dead ends: 119 [2022-11-22 01:38:38,315 INFO L226 Difference]: Without dead ends: 117 [2022-11-22 01:38:38,317 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 15 SyntacticMatches, 1 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 2 DeprecatedPredicates, 1085 ImplicationChecksByTransitivity, 7.6s TimeCoverageRelationStatistics Valid=733, Invalid=4379, Unknown=0, NotChecked=0, Total=5112 [2022-11-22 01:38:38,318 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 895 mSDsluCounter, 206 mSDsCounter, 0 mSdLazyCounter, 842 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 895 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 870 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 842 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:38,318 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [895 Valid, 220 Invalid, 870 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 842 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-22 01:38:38,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-11-22 01:38:38,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 66. [2022-11-22 01:38:38,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 62 states have (on average 1.2741935483870968) internal successors, (79), 65 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:38,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 79 transitions. [2022-11-22 01:38:38,321 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 79 transitions. Word has length 16 [2022-11-22 01:38:38,321 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:38,322 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 79 transitions. [2022-11-22 01:38:38,322 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 34 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:38,322 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 79 transitions. [2022-11-22 01:38:38,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-22 01:38:38,323 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:38,323 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:38,335 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-22 01:38:38,528 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:38,528 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:38,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:38,529 INFO L85 PathProgramCache]: Analyzing trace with hash -1817780669, now seen corresponding path program 1 times [2022-11-22 01:38:38,529 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:38,529 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [353567412] [2022-11-22 01:38:38,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:38,529 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:38,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:38,786 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:38,786 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:38,786 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [353567412] [2022-11-22 01:38:38,787 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [353567412] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:38,787 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1542026929] [2022-11-22 01:38:38,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:38,787 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:38,787 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:38,788 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:38,825 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-22 01:38:38,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:38,907 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-22 01:38:38,909 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:38,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:39,125 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:38:39,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 17 [2022-11-22 01:38:39,264 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:38:39,264 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:38:39,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 01:38:39,593 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-22 01:38:39,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 23 [2022-11-22 01:38:39,627 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:38:39,627 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1542026929] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:38:39,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [861934734] [2022-11-22 01:38:39,631 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:38:39,631 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:38:39,632 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:38:39,632 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:38:39,632 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:38:39,676 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:39,679 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:39,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:38:39,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:38:39,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:39,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:39,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:38:39,940 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:38:39,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:38:40,137 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:38:40,140 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:38:40,141 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:38:40,142 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:38:40,171 INFO L321 Elim1Store]: treesize reduction 89, result has 21.2 percent of original size [2022-11-22 01:38:40,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 8 case distinctions, treesize of input 49 treesize of output 43 [2022-11-22 01:38:40,269 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:38:40,272 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:38:40,273 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:38:40,275 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:38:40,303 INFO L321 Elim1Store]: treesize reduction 89, result has 21.2 percent of original size [2022-11-22 01:38:40,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 8 case distinctions, treesize of input 49 treesize of output 43 [2022-11-22 01:38:40,364 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:38:44,253 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [861934734] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:38:44,254 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:38:44,254 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [8, 8, 8] total 34 [2022-11-22 01:38:44,254 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1189058665] [2022-11-22 01:38:44,254 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:38:44,254 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-22 01:38:44,255 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:44,255 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-22 01:38:44,255 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=181, Invalid=941, Unknown=0, NotChecked=0, Total=1122 [2022-11-22 01:38:44,256 INFO L87 Difference]: Start difference. First operand 66 states and 79 transitions. Second operand has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:44,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:38:44,537 INFO L93 Difference]: Finished difference Result 122 states and 141 transitions. [2022-11-22 01:38:44,538 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-22 01:38:44,538 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-22 01:38:44,538 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:38:44,539 INFO L225 Difference]: With dead ends: 122 [2022-11-22 01:38:44,539 INFO L226 Difference]: Without dead ends: 108 [2022-11-22 01:38:44,539 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 25 SyntacticMatches, 3 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 249 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=181, Invalid=941, Unknown=0, NotChecked=0, Total=1122 [2022-11-22 01:38:44,540 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 94 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 156 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 156 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:38:44,540 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [94 Valid, 62 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 156 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 01:38:44,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-11-22 01:38:44,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 73. [2022-11-22 01:38:44,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 69 states have (on average 1.2463768115942029) internal successors, (86), 72 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:44,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 86 transitions. [2022-11-22 01:38:44,543 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 86 transitions. Word has length 18 [2022-11-22 01:38:44,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:38:44,543 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 86 transitions. [2022-11-22 01:38:44,543 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:44,544 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 86 transitions. [2022-11-22 01:38:44,544 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-22 01:38:44,544 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:38:44,544 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:38:44,554 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2022-11-22 01:38:44,750 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:44,750 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:38:44,750 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:38:44,750 INFO L85 PathProgramCache]: Analyzing trace with hash -1536674092, now seen corresponding path program 3 times [2022-11-22 01:38:44,751 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:38:44,751 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1022823666] [2022-11-22 01:38:44,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:38:44,751 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:38:44,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:38:45,303 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:45,304 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:38:45,304 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1022823666] [2022-11-22 01:38:45,304 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1022823666] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:38:45,304 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1821865726] [2022-11-22 01:38:45,304 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:38:45,304 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:38:45,305 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:38:45,305 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:38:45,307 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-22 01:38:45,408 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:38:45,408 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:38:45,411 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-22 01:38:45,420 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:38:45,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:38:45,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:38:45,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:38:46,267 INFO L321 Elim1Store]: treesize reduction 8, result has 74.2 percent of original size [2022-11-22 01:38:46,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 41 treesize of output 37 [2022-11-22 01:38:46,405 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:38:46,405 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:38:47,013 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:38:47,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 77 treesize of output 49 [2022-11-22 01:38:47,040 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:38:47,040 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 86 treesize of output 90 [2022-11-22 01:38:47,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 22 [2022-11-22 01:38:47,080 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-22 01:38:47,358 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 14 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:38:47,358 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1821865726] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:38:47,360 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [273433470] [2022-11-22 01:38:47,366 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 01:38:47,366 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:38:47,367 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:38:47,367 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:38:47,367 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:38:47,417 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:47,422 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:38:47,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:38:47,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:38:47,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:47,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:38:47,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:38:47,666 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:38:47,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:38:47,862 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:38:52,754 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3598#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-22 01:38:52,755 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:38:52,755 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:38:52,755 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 16, 13] total 40 [2022-11-22 01:38:52,755 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [953606993] [2022-11-22 01:38:52,755 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:38:52,756 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-11-22 01:38:52,756 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:38:52,756 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-11-22 01:38:52,757 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=193, Invalid=2256, Unknown=1, NotChecked=0, Total=2450 [2022-11-22 01:38:52,757 INFO L87 Difference]: Start difference. First operand 73 states and 86 transitions. Second operand has 41 states, 40 states have (on average 1.4) internal successors, (56), 41 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:38:55,408 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:38:58,720 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:39:04,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:39:04,410 INFO L93 Difference]: Finished difference Result 203 states and 229 transitions. [2022-11-22 01:39:04,413 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-11-22 01:39:04,413 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 40 states have (on average 1.4) internal successors, (56), 41 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-22 01:39:04,413 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:39:04,414 INFO L225 Difference]: With dead ends: 203 [2022-11-22 01:39:04,414 INFO L226 Difference]: Without dead ends: 197 [2022-11-22 01:39:04,416 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1847 ImplicationChecksByTransitivity, 12.2s TimeCoverageRelationStatistics Valid=1266, Invalid=7663, Unknown=1, NotChecked=0, Total=8930 [2022-11-22 01:39:04,417 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 1310 mSDsluCounter, 374 mSDsCounter, 0 mSdLazyCounter, 1429 mSolverCounterSat, 86 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1310 SdHoareTripleChecker+Valid, 391 SdHoareTripleChecker+Invalid, 1517 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 86 IncrementalHoareTripleChecker+Valid, 1429 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.7s IncrementalHoareTripleChecker+Time [2022-11-22 01:39:04,417 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1310 Valid, 391 Invalid, 1517 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [86 Valid, 1429 Invalid, 2 Unknown, 0 Unchecked, 5.7s Time] [2022-11-22 01:39:04,418 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2022-11-22 01:39:04,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 101. [2022-11-22 01:39:04,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 97 states have (on average 1.2577319587628866) internal successors, (122), 100 states have internal predecessors, (122), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:39:04,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 122 transitions. [2022-11-22 01:39:04,421 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 122 transitions. Word has length 20 [2022-11-22 01:39:04,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:39:04,421 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 122 transitions. [2022-11-22 01:39:04,421 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 40 states have (on average 1.4) internal successors, (56), 41 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:39:04,421 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 122 transitions. [2022-11-22 01:39:04,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-22 01:39:04,422 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:39:04,422 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:39:04,434 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-22 01:39:04,628 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2022-11-22 01:39:04,628 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:39:04,628 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:39:04,628 INFO L85 PathProgramCache]: Analyzing trace with hash 1986422707, now seen corresponding path program 1 times [2022-11-22 01:39:04,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:39:04,628 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1356648954] [2022-11-22 01:39:04,628 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:39:04,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:39:04,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:39:04,961 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:39:04,962 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:39:04,962 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1356648954] [2022-11-22 01:39:04,962 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1356648954] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:39:04,962 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [213394450] [2022-11-22 01:39:04,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:39:04,962 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:39:04,962 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:39:04,963 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:39:04,992 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-22 01:39:05,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:39:05,077 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-22 01:39:05,078 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:39:05,188 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:39:05,188 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:39:05,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 01:39:05,375 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:39:05,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [213394450] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:39:05,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1652687702] [2022-11-22 01:39:05,377 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 01:39:05,378 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:39:05,378 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:39:05,378 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:39:05,378 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:39:05,422 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:39:05,426 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:39:05,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:39:05,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:39:05,519 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:39:05,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:39:05,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:39:05,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:39:05,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:39:05,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:39:05,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:39:05,856 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:39:05,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:39:06,056 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:39:06,059 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:39:06,062 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:39:06,130 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-22 01:39:06,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-22 01:39:06,317 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:39:06,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:39:06,464 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:39:06,464 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:39:06,577 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:39:11,056 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4148#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:39:11,056 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:39:11,056 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:39:11,056 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 8] total 20 [2022-11-22 01:39:11,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [842284963] [2022-11-22 01:39:11,057 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:39:11,057 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-11-22 01:39:11,057 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:39:11,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-11-22 01:39:11,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=177, Invalid=1155, Unknown=0, NotChecked=0, Total=1332 [2022-11-22 01:39:11,058 INFO L87 Difference]: Start difference. First operand 101 states and 122 transitions. Second operand has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:39:11,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:39:11,466 INFO L93 Difference]: Finished difference Result 170 states and 199 transitions. [2022-11-22 01:39:11,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-22 01:39:11,466 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-22 01:39:11,466 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:39:11,467 INFO L225 Difference]: With dead ends: 170 [2022-11-22 01:39:11,467 INFO L226 Difference]: Without dead ends: 170 [2022-11-22 01:39:11,468 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 37 SyntacticMatches, 2 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 505 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=275, Invalid=1705, Unknown=0, NotChecked=0, Total=1980 [2022-11-22 01:39:11,469 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 182 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 242 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 182 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 251 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 242 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:39:11,469 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [182 Valid, 105 Invalid, 251 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 242 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:39:11,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2022-11-22 01:39:11,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 133. [2022-11-22 01:39:11,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 133 states, 129 states have (on average 1.255813953488372) internal successors, (162), 132 states have internal predecessors, (162), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:39:11,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133 states to 133 states and 162 transitions. [2022-11-22 01:39:11,473 INFO L78 Accepts]: Start accepts. Automaton has 133 states and 162 transitions. Word has length 22 [2022-11-22 01:39:11,473 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:39:11,473 INFO L495 AbstractCegarLoop]: Abstraction has 133 states and 162 transitions. [2022-11-22 01:39:11,473 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:39:11,473 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 162 transitions. [2022-11-22 01:39:11,474 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-22 01:39:11,474 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:39:11,474 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:39:11,483 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-22 01:39:11,680 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-22 01:39:11,680 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:39:11,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:39:11,681 INFO L85 PathProgramCache]: Analyzing trace with hash 80499577, now seen corresponding path program 1 times [2022-11-22 01:39:11,681 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:39:11,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1655004710] [2022-11-22 01:39:11,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:39:11,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:39:11,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:39:12,343 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:39:12,344 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:39:12,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1655004710] [2022-11-22 01:39:12,344 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1655004710] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:39:12,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [183575408] [2022-11-22 01:39:12,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:39:12,344 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:39:12,344 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:39:12,355 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:39:12,382 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-22 01:39:12,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:39:12,474 INFO L263 TraceCheckSpWp]: Trace formula consists of 190 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-22 01:39:12,476 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:39:12,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:39:12,774 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:39:12,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 17 [2022-11-22 01:39:12,940 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-22 01:39:12,940 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:39:13,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 01:39:13,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 16 [2022-11-22 01:39:13,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 23 [2022-11-22 01:39:13,345 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-22 01:39:13,346 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [183575408] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:39:13,346 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [128243603] [2022-11-22 01:39:13,348 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-22 01:39:13,348 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:39:13,348 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:39:13,348 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:39:13,349 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:39:13,388 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:39:13,392 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:39:13,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:39:13,440 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:39:13,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:39:13,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:39:13,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:39:13,626 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:39:13,626 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:39:13,803 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:39:13,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:39:13,980 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-22 01:39:13,980 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 120 treesize of output 119 [2022-11-22 01:39:14,182 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:39:14,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:39:14,325 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:39:14,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:39:14,460 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:39:18,602 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4635#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:39:18,602 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:39:18,602 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:39:18,603 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 26 [2022-11-22 01:39:18,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [791380686] [2022-11-22 01:39:18,603 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:39:18,603 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-22 01:39:18,603 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:39:18,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-22 01:39:18,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=1410, Unknown=0, NotChecked=0, Total=1560 [2022-11-22 01:39:18,605 INFO L87 Difference]: Start difference. First operand 133 states and 162 transitions. Second operand has 26 states, 26 states have (on average 2.0384615384615383) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:39:22,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:39:22,123 INFO L93 Difference]: Finished difference Result 194 states and 222 transitions. [2022-11-22 01:39:22,124 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-22 01:39:22,124 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 2.0384615384615383) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-22 01:39:22,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:39:22,125 INFO L225 Difference]: With dead ends: 194 [2022-11-22 01:39:22,125 INFO L226 Difference]: Without dead ends: 175 [2022-11-22 01:39:22,127 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 37 SyntacticMatches, 1 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1037 ImplicationChecksByTransitivity, 7.9s TimeCoverageRelationStatistics Valid=660, Invalid=4032, Unknown=0, NotChecked=0, Total=4692 [2022-11-22 01:39:22,127 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 255 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 398 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 255 SdHoareTripleChecker+Valid, 86 SdHoareTripleChecker+Invalid, 418 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 398 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:39:22,128 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [255 Valid, 86 Invalid, 418 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 398 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-22 01:39:22,128 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2022-11-22 01:39:22,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 109. [2022-11-22 01:39:22,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 105 states have (on average 1.2190476190476192) internal successors, (128), 108 states have internal predecessors, (128), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:39:22,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 128 transitions. [2022-11-22 01:39:22,131 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 128 transitions. Word has length 22 [2022-11-22 01:39:22,132 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:39:22,132 INFO L495 AbstractCegarLoop]: Abstraction has 109 states and 128 transitions. [2022-11-22 01:39:22,132 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 2.0384615384615383) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:39:22,132 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 128 transitions. [2022-11-22 01:39:22,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-22 01:39:22,133 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:39:22,133 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:39:22,149 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-11-22 01:39:22,338 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:39:22,339 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:39:22,339 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:39:22,339 INFO L85 PathProgramCache]: Analyzing trace with hash 1214436490, now seen corresponding path program 4 times [2022-11-22 01:39:22,339 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:39:22,339 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1747420502] [2022-11-22 01:39:22,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:39:22,339 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:39:22,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:39:23,025 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:39:23,025 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:39:23,025 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1747420502] [2022-11-22 01:39:23,026 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1747420502] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:39:23,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1732052600] [2022-11-22 01:39:23,026 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:39:23,026 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:39:23,026 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:39:23,027 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:39:23,049 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-22 01:39:23,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:39:23,151 INFO L263 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 62 conjunts are in the unsatisfiable core [2022-11-22 01:39:23,154 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:39:23,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:39:23,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:39:23,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:39:28,455 INFO L321 Elim1Store]: treesize reduction 19, result has 53.7 percent of original size [2022-11-22 01:39:28,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 51 treesize of output 40 [2022-11-22 01:39:28,500 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 8 proven. 19 refuted. 5 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:39:28,500 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:39:31,321 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:39:31,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 103 treesize of output 61 [2022-11-22 01:39:31,344 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:39:31,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 111 treesize of output 119 [2022-11-22 01:39:31,384 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:39:31,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 43 treesize of output 29 [2022-11-22 01:39:32,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:39:32,245 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 16 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:39:32,245 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1732052600] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:39:32,245 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [736019039] [2022-11-22 01:39:32,247 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 01:39:32,247 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:39:32,247 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:39:32,247 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:39:32,248 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:39:32,288 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:39:32,292 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:39:32,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:39:32,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:39:32,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:39:32,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:39:32,453 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:39:32,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:39:32,812 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:39:36,422 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5196#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-22 01:39:36,422 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:39:36,422 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:39:36,422 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 18, 18] total 48 [2022-11-22 01:39:36,422 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [847807734] [2022-11-22 01:39:36,422 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:39:36,423 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-22 01:39:36,423 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:39:36,423 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-22 01:39:36,424 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=246, Invalid=3050, Unknown=10, NotChecked=0, Total=3306 [2022-11-22 01:39:36,425 INFO L87 Difference]: Start difference. First operand 109 states and 128 transitions. Second operand has 48 states, 48 states have (on average 1.4375) internal successors, (69), 48 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:40:08,640 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.19s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:40:09,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:40:09,224 INFO L93 Difference]: Finished difference Result 281 states and 310 transitions. [2022-11-22 01:40:09,224 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 58 states. [2022-11-22 01:40:09,224 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 1.4375) internal successors, (69), 48 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-22 01:40:09,225 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:40:09,226 INFO L225 Difference]: With dead ends: 281 [2022-11-22 01:40:09,226 INFO L226 Difference]: Without dead ends: 279 [2022-11-22 01:40:09,231 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 28 SyntacticMatches, 1 SemanticMatches, 111 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3020 ImplicationChecksByTransitivity, 40.1s TimeCoverageRelationStatistics Valid=1708, Invalid=10937, Unknown=11, NotChecked=0, Total=12656 [2022-11-22 01:40:09,231 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 1271 mSDsluCounter, 424 mSDsCounter, 0 mSdLazyCounter, 1986 mSolverCounterSat, 47 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1271 SdHoareTripleChecker+Valid, 445 SdHoareTripleChecker+Invalid, 2034 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 1986 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.7s IncrementalHoareTripleChecker+Time [2022-11-22 01:40:09,231 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1271 Valid, 445 Invalid, 2034 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 1986 Invalid, 1 Unknown, 0 Unchecked, 4.7s Time] [2022-11-22 01:40:09,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 279 states. [2022-11-22 01:40:09,235 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 279 to 142. [2022-11-22 01:40:09,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 138 states have (on average 1.210144927536232) internal successors, (167), 141 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:40:09,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 167 transitions. [2022-11-22 01:40:09,236 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 167 transitions. Word has length 24 [2022-11-22 01:40:09,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:40:09,236 INFO L495 AbstractCegarLoop]: Abstraction has 142 states and 167 transitions. [2022-11-22 01:40:09,236 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 1.4375) internal successors, (69), 48 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:40:09,237 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 167 transitions. [2022-11-22 01:40:09,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-22 01:40:09,237 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:40:09,237 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:40:09,246 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-22 01:40:09,443 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-11-22 01:40:09,443 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:40:09,443 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:40:09,443 INFO L85 PathProgramCache]: Analyzing trace with hash -269170963, now seen corresponding path program 1 times [2022-11-22 01:40:09,444 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:40:09,444 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [118237697] [2022-11-22 01:40:09,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:40:09,444 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:40:09,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:40:09,712 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-22 01:40:09,712 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:40:09,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [118237697] [2022-11-22 01:40:09,713 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [118237697] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:40:09,713 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:40:09,713 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-22 01:40:09,713 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1814309658] [2022-11-22 01:40:09,713 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:40:09,713 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-22 01:40:09,713 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:40:09,714 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-22 01:40:09,714 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-22 01:40:09,714 INFO L87 Difference]: Start difference. First operand 142 states and 167 transitions. Second operand has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:40:09,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:40:09,847 INFO L93 Difference]: Finished difference Result 183 states and 212 transitions. [2022-11-22 01:40:09,848 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-22 01:40:09,848 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-22 01:40:09,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:40:09,849 INFO L225 Difference]: With dead ends: 183 [2022-11-22 01:40:09,849 INFO L226 Difference]: Without dead ends: 145 [2022-11-22 01:40:09,849 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=106, Unknown=0, NotChecked=0, Total=156 [2022-11-22 01:40:09,849 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 51 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 84 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:40:09,850 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 74 Invalid, 84 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:40:09,850 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 145 states. [2022-11-22 01:40:09,852 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 145 to 141. [2022-11-22 01:40:09,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 137 states have (on average 1.2043795620437956) internal successors, (165), 140 states have internal predecessors, (165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:40:09,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 165 transitions. [2022-11-22 01:40:09,853 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 165 transitions. Word has length 27 [2022-11-22 01:40:09,853 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:40:09,853 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 165 transitions. [2022-11-22 01:40:09,854 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:40:09,854 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 165 transitions. [2022-11-22 01:40:09,854 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-22 01:40:09,854 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:40:09,855 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:40:09,855 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable25 [2022-11-22 01:40:09,855 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:40:09,855 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:40:09,855 INFO L85 PathProgramCache]: Analyzing trace with hash -1881611658, now seen corresponding path program 2 times [2022-11-22 01:40:09,856 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:40:09,856 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1704334565] [2022-11-22 01:40:09,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:40:09,856 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:40:09,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:40:10,147 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 7 proven. 5 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 01:40:10,147 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:40:10,147 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1704334565] [2022-11-22 01:40:10,148 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1704334565] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:40:10,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [42951206] [2022-11-22 01:40:10,148 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:40:10,148 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:40:10,148 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:40:10,151 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:40:10,159 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-22 01:40:10,427 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 01:40:10,427 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:40:10,429 INFO L263 TraceCheckSpWp]: Trace formula consists of 224 conjuncts, 65 conjunts are in the unsatisfiable core [2022-11-22 01:40:10,434 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:40:10,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:40:10,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:40:10,766 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:40:10,863 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:40:10,865 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:40:10,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 01:40:10,888 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 8 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:40:10,888 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:40:10,947 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_539 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_539) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) 0)) is different from false [2022-11-22 01:40:11,010 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_539 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~dst#1.base| v_ArrVal_539) |c_ULTIMATE.start_cstrncat_~src#1.base|) (+ |c_ULTIMATE.start_cstrncat_~src#1.offset| 1)) 0)) is different from false [2022-11-22 01:40:11,017 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:40:11,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:40:11,024 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:40:11,024 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:40:11,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:40:11,221 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 2 not checked. [2022-11-22 01:40:11,222 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [42951206] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:40:11,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [985005437] [2022-11-22 01:40:11,223 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 01:40:11,223 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:40:11,223 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:40:11,223 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:40:11,224 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:40:11,278 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:40:11,280 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:40:11,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:40:11,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:40:11,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:40:11,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:40:11,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-22 01:40:11,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:40:11,517 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:40:11,608 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-22 01:40:11,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-22 01:40:11,778 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-22 01:40:11,779 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-22 01:40:12,783 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:40:12,784 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:40:12,788 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:40:12,871 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-22 01:40:12,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1036 treesize of output 1019 [2022-11-22 01:40:13,143 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:40:13,150 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:40:13,165 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:40:13,178 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:40:13,587 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-22 01:40:13,664 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:40:13,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:40:13,832 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:40:13,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:40:13,942 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-22 01:40:13,976 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:40:20,411 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6269#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-22 01:40:20,411 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:40:20,411 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:40:20,411 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 14, 13] total 33 [2022-11-22 01:40:20,411 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2111237689] [2022-11-22 01:40:20,411 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:40:20,412 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-22 01:40:20,412 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:40:20,412 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-22 01:40:20,413 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=192, Invalid=1969, Unknown=9, NotChecked=182, Total=2352 [2022-11-22 01:40:20,414 INFO L87 Difference]: Start difference. First operand 141 states and 165 transitions. Second operand has 33 states, 33 states have (on average 2.090909090909091) internal successors, (69), 33 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:40:22,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:40:22,077 INFO L93 Difference]: Finished difference Result 240 states and 272 transitions. [2022-11-22 01:40:22,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-22 01:40:22,077 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 2.090909090909091) internal successors, (69), 33 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-22 01:40:22,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:40:22,078 INFO L225 Difference]: With dead ends: 240 [2022-11-22 01:40:22,078 INFO L226 Difference]: Without dead ends: 180 [2022-11-22 01:40:22,080 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 70 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 1213 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=556, Invalid=4273, Unknown=9, NotChecked=274, Total=5112 [2022-11-22 01:40:22,080 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 274 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 459 mSolverCounterSat, 21 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 274 SdHoareTripleChecker+Valid, 152 SdHoareTripleChecker+Invalid, 571 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 459 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 89 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:40:22,081 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [274 Valid, 152 Invalid, 571 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 459 Invalid, 2 Unknown, 89 Unchecked, 0.4s Time] [2022-11-22 01:40:22,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2022-11-22 01:40:22,084 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 172. [2022-11-22 01:40:22,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 168 states have (on average 1.1904761904761905) internal successors, (200), 171 states have internal predecessors, (200), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:40:22,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 200 transitions. [2022-11-22 01:40:22,085 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 200 transitions. Word has length 27 [2022-11-22 01:40:22,086 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:40:22,086 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 200 transitions. [2022-11-22 01:40:22,086 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 2.090909090909091) internal successors, (69), 33 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:40:22,086 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 200 transitions. [2022-11-22 01:40:22,087 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-22 01:40:22,087 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:40:22,087 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:40:22,093 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-22 01:40:22,293 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-22 01:40:22,293 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:40:22,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:40:22,294 INFO L85 PathProgramCache]: Analyzing trace with hash 2038601280, now seen corresponding path program 5 times [2022-11-22 01:40:22,294 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:40:22,294 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [640016180] [2022-11-22 01:40:22,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:40:22,295 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:40:22,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:40:23,113 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:40:23,114 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:40:23,114 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [640016180] [2022-11-22 01:40:23,114 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [640016180] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:40:23,114 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [466724298] [2022-11-22 01:40:23,114 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:40:23,114 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:40:23,114 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:40:23,116 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:40:23,138 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-22 01:40:23,424 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-22 01:40:23,424 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:40:23,427 INFO L263 TraceCheckSpWp]: Trace formula consists of 225 conjuncts, 78 conjunts are in the unsatisfiable core [2022-11-22 01:40:23,429 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:40:23,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:40:23,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:40:23,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:40:24,828 INFO L321 Elim1Store]: treesize reduction 16, result has 81.0 percent of original size [2022-11-22 01:40:24,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 6 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 9 case distinctions, treesize of input 52 treesize of output 90 [2022-11-22 01:40:25,039 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 0 proven. 46 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:40:25,039 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:40:26,487 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:40:26,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 127 treesize of output 71 [2022-11-22 01:40:26,566 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:40:26,567 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 6 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 9 case distinctions, treesize of input 132 treesize of output 187 [2022-11-22 01:40:26,591 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-22 01:40:26,633 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:40:26,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 52 treesize of output 74 [2022-11-22 01:40:27,501 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 0 proven. 25 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 01:40:27,501 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [466724298] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:40:27,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [930191360] [2022-11-22 01:40:27,503 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 01:40:27,503 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:40:27,503 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:40:27,503 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:40:27,504 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:40:27,551 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:40:27,555 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:40:27,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:40:27,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:40:27,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:40:27,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:40:27,719 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:40:27,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:40:28,101 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:40:32,014 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6954#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-22 01:40:32,015 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:40:32,015 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:40:32,015 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 18, 15] total 48 [2022-11-22 01:40:32,015 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [644617416] [2022-11-22 01:40:32,015 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:40:32,016 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-22 01:40:32,016 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:40:32,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-22 01:40:32,017 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=272, Invalid=3150, Unknown=0, NotChecked=0, Total=3422 [2022-11-22 01:40:32,017 INFO L87 Difference]: Start difference. First operand 172 states and 200 transitions. Second operand has 49 states, 48 states have (on average 1.5) internal successors, (72), 49 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:42:16,472 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:43:44,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:43:44,019 INFO L93 Difference]: Finished difference Result 378 states and 422 transitions. [2022-11-22 01:43:44,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 66 states. [2022-11-22 01:43:44,020 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 48 states have (on average 1.5) internal successors, (72), 49 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-22 01:43:44,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:43:44,022 INFO L225 Difference]: With dead ends: 378 [2022-11-22 01:43:44,022 INFO L226 Difference]: Without dead ends: 368 [2022-11-22 01:43:44,024 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 121 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3056 ImplicationChecksByTransitivity, 192.5s TimeCoverageRelationStatistics Valid=2163, Invalid=12789, Unknown=54, NotChecked=0, Total=15006 [2022-11-22 01:43:44,024 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 1355 mSDsluCounter, 481 mSDsCounter, 0 mSdLazyCounter, 2337 mSolverCounterSat, 111 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1355 SdHoareTripleChecker+Valid, 506 SdHoareTripleChecker+Invalid, 2449 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 111 IncrementalHoareTripleChecker+Valid, 2337 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:43:44,024 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1355 Valid, 506 Invalid, 2449 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [111 Valid, 2337 Invalid, 1 Unknown, 0 Unchecked, 6.0s Time] [2022-11-22 01:43:44,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 368 states. [2022-11-22 01:43:44,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 368 to 214. [2022-11-22 01:43:44,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 214 states, 210 states have (on average 1.2) internal successors, (252), 213 states have internal predecessors, (252), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:43:44,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 252 transitions. [2022-11-22 01:43:44,035 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 252 transitions. Word has length 28 [2022-11-22 01:43:44,036 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:43:44,036 INFO L495 AbstractCegarLoop]: Abstraction has 214 states and 252 transitions. [2022-11-22 01:43:44,036 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 48 states have (on average 1.5) internal successors, (72), 49 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:43:44,036 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 252 transitions. [2022-11-22 01:43:44,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-22 01:43:44,043 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:43:44,044 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:43:44,051 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2022-11-22 01:43:44,249 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-22 01:43:44,250 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:43:44,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:43:44,250 INFO L85 PathProgramCache]: Analyzing trace with hash -984516838, now seen corresponding path program 1 times [2022-11-22 01:43:44,250 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:43:44,250 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [810972095] [2022-11-22 01:43:44,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:43:44,250 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:43:44,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:43:46,929 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 4 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:43:46,930 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:43:46,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [810972095] [2022-11-22 01:43:46,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [810972095] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:43:46,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1994919732] [2022-11-22 01:43:46,930 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:43:46,930 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:43:46,930 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:43:46,932 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:43:46,939 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-22 01:43:47,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:43:47,074 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 54 conjunts are in the unsatisfiable core [2022-11-22 01:43:47,076 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:43:47,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:43:47,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:43:47,683 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:43:48,238 INFO L321 Elim1Store]: treesize reduction 11, result has 47.6 percent of original size [2022-11-22 01:43:48,238 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 20 [2022-11-22 01:43:48,290 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 7 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:43:48,290 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:43:48,724 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:43:48,724 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 53 treesize of output 39 [2022-11-22 01:43:48,737 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:43:48,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 63 [2022-11-22 01:43:48,754 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:43:48,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 15 [2022-11-22 01:43:49,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:43:49,532 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:43:49,532 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1994919732] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:43:49,532 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [949078788] [2022-11-22 01:43:49,534 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-22 01:43:49,534 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:43:49,534 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:43:49,535 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:43:49,535 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:43:49,578 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:43:49,583 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:43:49,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:43:49,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:43:49,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:43:49,686 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:43:49,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-22 01:43:49,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:43:49,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:43:49,910 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-22 01:43:49,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-22 01:43:50,120 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-22 01:43:50,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-22 01:43:50,849 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-22 01:43:50,887 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-22 01:43:50,988 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:43:50,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:43:51,080 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-22 01:43:51,096 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:43:57,231 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7900#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:43:57,231 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:43:57,231 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:43:57,231 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 16, 16] total 47 [2022-11-22 01:43:57,231 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2133927798] [2022-11-22 01:43:57,232 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:43:57,232 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-22 01:43:57,232 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:43:57,232 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-22 01:43:57,233 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=254, Invalid=3643, Unknown=9, NotChecked=0, Total=3906 [2022-11-22 01:43:57,234 INFO L87 Difference]: Start difference. First operand 214 states and 252 transitions. Second operand has 48 states, 48 states have (on average 1.5833333333333333) internal successors, (76), 47 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:05,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:44:05,422 INFO L93 Difference]: Finished difference Result 251 states and 289 transitions. [2022-11-22 01:44:05,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-22 01:44:05,423 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 1.5833333333333333) internal successors, (76), 47 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-22 01:44:05,423 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:44:05,424 INFO L225 Difference]: With dead ends: 251 [2022-11-22 01:44:05,424 INFO L226 Difference]: Without dead ends: 242 [2022-11-22 01:44:05,426 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 42 SyntacticMatches, 1 SemanticMatches, 91 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 1974 ImplicationChecksByTransitivity, 15.9s TimeCoverageRelationStatistics Valid=1007, Invalid=7540, Unknown=9, NotChecked=0, Total=8556 [2022-11-22 01:44:05,426 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 451 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 963 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 451 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 995 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 963 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:44:05,427 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [451 Valid, 192 Invalid, 995 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 963 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-22 01:44:05,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 242 states. [2022-11-22 01:44:05,431 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 242 to 195. [2022-11-22 01:44:05,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 195 states, 191 states have (on average 1.198952879581152) internal successors, (229), 194 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:05,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 195 states to 195 states and 229 transitions. [2022-11-22 01:44:05,433 INFO L78 Accepts]: Start accepts. Automaton has 195 states and 229 transitions. Word has length 29 [2022-11-22 01:44:05,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:44:05,433 INFO L495 AbstractCegarLoop]: Abstraction has 195 states and 229 transitions. [2022-11-22 01:44:05,434 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 1.5833333333333333) internal successors, (76), 47 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:05,434 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 229 transitions. [2022-11-22 01:44:05,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-22 01:44:05,435 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:44:05,435 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:44:05,453 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-22 01:44:05,651 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-22 01:44:05,651 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:44:05,651 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:44:05,651 INFO L85 PathProgramCache]: Analyzing trace with hash -1835093626, now seen corresponding path program 3 times [2022-11-22 01:44:05,651 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:44:05,652 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1542241974] [2022-11-22 01:44:05,652 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:44:05,652 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:44:05,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:44:06,144 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:44:06,144 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:44:06,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1542241974] [2022-11-22 01:44:06,145 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1542241974] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:44:06,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1462545951] [2022-11-22 01:44:06,145 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:44:06,145 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:44:06,145 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:44:06,146 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:44:06,170 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-22 01:44:06,342 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:44:06,343 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:44:06,345 INFO L263 TraceCheckSpWp]: Trace formula consists of 250 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-22 01:44:06,347 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:44:06,360 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:44:06,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:44:06,533 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:44:06,533 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:44:06,886 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:44:06,887 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1462545951] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:44:06,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2036695828] [2022-11-22 01:44:06,895 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 01:44:06,895 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:44:06,898 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:44:06,898 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:44:06,898 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:44:06,936 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:44:06,940 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:44:06,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:44:06,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:07,024 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:07,052 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:44:07,115 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 01:44:07,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-22 01:44:07,176 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:07,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:07,316 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-22 01:44:07,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-22 01:44:07,541 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-22 01:44:07,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-22 01:44:08,519 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:44:08,521 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:44:08,525 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:44:08,627 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-22 01:44:08,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1032 treesize of output 1029 [2022-11-22 01:44:09,268 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:09,291 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:09,304 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:09,318 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:09,320 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:09,392 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:44:09,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:44:09,568 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:44:09,569 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:44:09,687 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:09,717 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:44:16,074 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8628#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:44:16,075 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:44:16,075 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:44:16,075 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 10] total 26 [2022-11-22 01:44:16,075 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [60028822] [2022-11-22 01:44:16,076 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:44:16,076 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-22 01:44:16,076 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:44:16,076 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-22 01:44:16,077 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=1616, Unknown=0, NotChecked=0, Total=1806 [2022-11-22 01:44:16,077 INFO L87 Difference]: Start difference. First operand 195 states and 229 transitions. Second operand has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:16,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:44:16,765 INFO L93 Difference]: Finished difference Result 234 states and 262 transitions. [2022-11-22 01:44:16,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-22 01:44:16,765 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-22 01:44:16,765 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:44:16,767 INFO L225 Difference]: With dead ends: 234 [2022-11-22 01:44:16,767 INFO L226 Difference]: Without dead ends: 234 [2022-11-22 01:44:16,767 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 688 ImplicationChecksByTransitivity, 7.2s TimeCoverageRelationStatistics Valid=371, Invalid=2385, Unknown=0, NotChecked=0, Total=2756 [2022-11-22 01:44:16,768 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 277 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 428 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 277 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 437 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 428 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:44:16,768 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [277 Valid, 115 Invalid, 437 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 428 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 01:44:16,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2022-11-22 01:44:16,772 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 216. [2022-11-22 01:44:16,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 216 states, 212 states have (on average 1.1839622641509433) internal successors, (251), 215 states have internal predecessors, (251), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:16,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 251 transitions. [2022-11-22 01:44:16,774 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 251 transitions. Word has length 31 [2022-11-22 01:44:16,774 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:44:16,774 INFO L495 AbstractCegarLoop]: Abstraction has 216 states and 251 transitions. [2022-11-22 01:44:16,774 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:16,775 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 251 transitions. [2022-11-22 01:44:16,775 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-22 01:44:16,775 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:44:16,775 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:44:16,792 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-22 01:44:16,981 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:44:16,981 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:44:16,982 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:44:16,982 INFO L85 PathProgramCache]: Analyzing trace with hash -1877983743, now seen corresponding path program 1 times [2022-11-22 01:44:16,982 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:44:16,982 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [99777516] [2022-11-22 01:44:16,982 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:44:16,982 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:44:17,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:44:17,695 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:44:17,695 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:44:17,695 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [99777516] [2022-11-22 01:44:17,695 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [99777516] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:44:17,695 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [908955881] [2022-11-22 01:44:17,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:44:17,696 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:44:17,696 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:44:17,697 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:44:17,699 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-22 01:44:17,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:44:17,839 INFO L263 TraceCheckSpWp]: Trace formula consists of 265 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-22 01:44:17,840 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:44:18,364 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-22 01:44:18,364 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:44:19,182 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 4 proven. 14 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-22 01:44:19,182 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [908955881] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:44:19,182 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2018689900] [2022-11-22 01:44:19,183 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-22 01:44:19,184 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:44:19,184 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:44:19,184 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:44:19,184 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:44:19,229 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:44:19,234 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:44:19,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:44:19,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:44:19,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:19,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:19,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-22 01:44:19,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:19,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:19,588 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-22 01:44:19,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-22 01:44:19,754 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-22 01:44:19,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-22 01:44:20,424 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:20,453 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:20,555 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:44:20,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:44:20,727 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-22 01:44:20,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-22 01:44:20,916 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:44:20,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:44:21,056 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:44:21,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:44:21,235 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:21,251 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:44:28,294 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9354#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.base_69| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_68| Int)) (and (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_69|) (= (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_69|) 1) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_68|) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_69|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_68|) 0)) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_69|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_68|)) (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_68| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_69|)))) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:44:28,295 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:44:28,295 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:44:28,295 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 13, 13] total 42 [2022-11-22 01:44:28,295 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1011690756] [2022-11-22 01:44:28,295 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:44:28,295 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-11-22 01:44:28,296 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:44:28,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-11-22 01:44:28,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=254, Invalid=3052, Unknown=0, NotChecked=0, Total=3306 [2022-11-22 01:44:28,296 INFO L87 Difference]: Start difference. First operand 216 states and 251 transitions. Second operand has 42 states, 42 states have (on average 2.261904761904762) internal successors, (95), 42 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:30,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:44:30,933 INFO L93 Difference]: Finished difference Result 285 states and 323 transitions. [2022-11-22 01:44:30,933 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-22 01:44:30,933 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 2.261904761904762) internal successors, (95), 42 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-22 01:44:30,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:44:30,934 INFO L225 Difference]: With dead ends: 285 [2022-11-22 01:44:30,935 INFO L226 Difference]: Without dead ends: 285 [2022-11-22 01:44:30,935 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1150 ImplicationChecksByTransitivity, 10.2s TimeCoverageRelationStatistics Valid=817, Invalid=5825, Unknown=0, NotChecked=0, Total=6642 [2022-11-22 01:44:30,936 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 650 mSDsluCounter, 319 mSDsCounter, 0 mSdLazyCounter, 1024 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 650 SdHoareTripleChecker+Valid, 336 SdHoareTripleChecker+Invalid, 1048 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 1024 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-22 01:44:30,936 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [650 Valid, 336 Invalid, 1048 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 1024 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-22 01:44:30,937 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 285 states. [2022-11-22 01:44:30,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 285 to 273. [2022-11-22 01:44:30,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 269 states have (on average 1.1672862453531598) internal successors, (314), 272 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:30,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 314 transitions. [2022-11-22 01:44:30,944 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 314 transitions. Word has length 34 [2022-11-22 01:44:30,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:44:30,944 INFO L495 AbstractCegarLoop]: Abstraction has 273 states and 314 transitions. [2022-11-22 01:44:30,944 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 2.261904761904762) internal successors, (95), 42 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:30,945 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 314 transitions. [2022-11-22 01:44:30,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-22 01:44:30,945 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:44:30,946 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:44:30,962 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-22 01:44:31,152 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable30 [2022-11-22 01:44:31,152 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:44:31,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:44:31,152 INFO L85 PathProgramCache]: Analyzing trace with hash 1349829763, now seen corresponding path program 4 times [2022-11-22 01:44:31,153 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:44:31,153 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1427264739] [2022-11-22 01:44:31,153 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:44:31,153 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:44:31,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:44:31,498 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:44:31,498 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:44:31,498 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1427264739] [2022-11-22 01:44:31,499 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1427264739] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:44:31,499 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1911776522] [2022-11-22 01:44:31,499 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:44:31,499 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:44:31,499 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:44:31,503 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:44:31,513 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-22 01:44:31,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:44:31,665 INFO L263 TraceCheckSpWp]: Trace formula consists of 282 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-22 01:44:31,667 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:44:31,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:44:31,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:32,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:44:32,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:44:32,275 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 01:44:32,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 01:44:32,303 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 8 proven. 17 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:44:32,303 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:44:32,569 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_773 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~dst#1.base| v_ArrVal_773) |c_ULTIMATE.start_cstrncat_~src#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~src#1.offset|)) 0)) is different from false [2022-11-22 01:44:32,578 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:44:32,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:44:32,587 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:44:32,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:44:32,746 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 8 proven. 17 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:44:32,746 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1911776522] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:44:32,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [709709777] [2022-11-22 01:44:32,748 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 01:44:32,748 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:44:32,749 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:44:32,749 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:44:32,749 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:44:32,790 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:44:32,797 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:44:32,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:44:32,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:32,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:32,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:44:32,959 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 01:44:32,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-22 01:44:33,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:33,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:33,122 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-22 01:44:33,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-22 01:44:33,289 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-22 01:44:33,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-22 01:44:34,213 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:44:34,215 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:44:34,219 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:44:34,336 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-22 01:44:34,336 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1036 treesize of output 1019 [2022-11-22 01:44:34,590 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:34,593 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:34,599 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:34,605 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:34,866 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:34,937 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:44:34,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:44:35,088 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:44:35,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:44:35,197 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:35,230 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:44:42,195 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10219#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-22 01:44:42,195 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:44:42,195 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:44:42,195 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 15, 15] total 33 [2022-11-22 01:44:42,196 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1687161763] [2022-11-22 01:44:42,196 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:44:42,196 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-22 01:44:42,196 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:44:42,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-22 01:44:42,197 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=186, Invalid=2051, Unknown=23, NotChecked=92, Total=2352 [2022-11-22 01:44:42,197 INFO L87 Difference]: Start difference. First operand 273 states and 314 transitions. Second operand has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 33 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:44,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:44:44,373 INFO L93 Difference]: Finished difference Result 367 states and 408 transitions. [2022-11-22 01:44:44,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-22 01:44:44,374 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 33 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-22 01:44:44,374 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:44:44,376 INFO L225 Difference]: With dead ends: 367 [2022-11-22 01:44:44,376 INFO L226 Difference]: Without dead ends: 282 [2022-11-22 01:44:44,377 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 146 GetRequests, 68 SyntacticMatches, 2 SemanticMatches, 76 ConstructedPredicates, 1 IntricatePredicates, 2 DeprecatedPredicates, 1561 ImplicationChecksByTransitivity, 9.2s TimeCoverageRelationStatistics Valid=575, Invalid=5258, Unknown=23, NotChecked=150, Total=6006 [2022-11-22 01:44:44,377 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 406 mSDsluCounter, 305 mSDsCounter, 0 mSdLazyCounter, 749 mSolverCounterSat, 23 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 406 SdHoareTripleChecker+Valid, 328 SdHoareTripleChecker+Invalid, 852 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 749 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 78 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 01:44:44,378 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [406 Valid, 328 Invalid, 852 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 749 Invalid, 2 Unknown, 78 Unchecked, 0.6s Time] [2022-11-22 01:44:44,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2022-11-22 01:44:44,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2022-11-22 01:44:44,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 260 states, 256 states have (on average 1.1875) internal successors, (304), 259 states have internal predecessors, (304), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:44,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 304 transitions. [2022-11-22 01:44:44,384 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 304 transitions. Word has length 36 [2022-11-22 01:44:44,384 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:44:44,385 INFO L495 AbstractCegarLoop]: Abstraction has 260 states and 304 transitions. [2022-11-22 01:44:44,385 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 33 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:44:44,385 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 304 transitions. [2022-11-22 01:44:44,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-22 01:44:44,386 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:44:44,386 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:44:44,392 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-22 01:44:44,590 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31,23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:44:44,591 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:44:44,591 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:44:44,591 INFO L85 PathProgramCache]: Analyzing trace with hash 738344494, now seen corresponding path program 2 times [2022-11-22 01:44:44,591 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:44:44,591 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1565368572] [2022-11-22 01:44:44,591 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:44:44,591 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:44:44,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:44:45,959 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 8 proven. 48 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:44:45,960 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:44:45,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1565368572] [2022-11-22 01:44:45,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1565368572] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:44:45,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [105589831] [2022-11-22 01:44:45,960 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:44:45,960 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:44:45,961 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:44:45,963 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:44:45,966 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-22 01:44:46,216 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-22 01:44:46,216 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:44:46,219 INFO L263 TraceCheckSpWp]: Trace formula consists of 279 conjuncts, 72 conjunts are in the unsatisfiable core [2022-11-22 01:44:46,221 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:44:46,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:44:46,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:44:46,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:44:47,458 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:44:47,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 17 [2022-11-22 01:44:47,634 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 1 proven. 54 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:44:47,635 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:44:48,404 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:44:48,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-22 01:44:48,413 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:44:48,413 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-22 01:44:48,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:44:49,308 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:44:49,397 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 10 proven. 45 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:44:49,398 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [105589831] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:44:49,398 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2121376551] [2022-11-22 01:44:49,399 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-22 01:44:49,399 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:44:49,400 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:44:49,400 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:44:49,400 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:44:49,444 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:44:49,449 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:44:49,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:44:49,486 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:49,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:49,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:44:49,611 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 01:44:49,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-22 01:44:49,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:49,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:44:49,810 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-22 01:44:49,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-22 01:44:49,984 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-22 01:44:49,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-22 01:44:50,664 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:50,682 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:50,762 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:44:50,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:44:50,843 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-22 01:44:50,855 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:44:57,748 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11197#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:44:57,748 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:44:57,749 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:44:57,749 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 20, 20] total 60 [2022-11-22 01:44:57,749 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1298479533] [2022-11-22 01:44:57,749 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:44:57,749 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 61 states [2022-11-22 01:44:57,749 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:44:57,750 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 61 interpolants. [2022-11-22 01:44:57,750 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=345, Invalid=5355, Unknown=0, NotChecked=0, Total=5700 [2022-11-22 01:44:57,750 INFO L87 Difference]: Start difference. First operand 260 states and 304 transitions. Second operand has 61 states, 61 states have (on average 1.7868852459016393) internal successors, (109), 60 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:45:07,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:45:07,442 INFO L93 Difference]: Finished difference Result 568 states and 651 transitions. [2022-11-22 01:45:07,442 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2022-11-22 01:45:07,442 INFO L78 Accepts]: Start accepts. Automaton has has 61 states, 61 states have (on average 1.7868852459016393) internal successors, (109), 60 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-22 01:45:07,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:45:07,445 INFO L225 Difference]: With dead ends: 568 [2022-11-22 01:45:07,445 INFO L226 Difference]: Without dead ends: 568 [2022-11-22 01:45:07,446 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2835 ImplicationChecksByTransitivity, 17.1s TimeCoverageRelationStatistics Valid=1136, Invalid=12204, Unknown=0, NotChecked=0, Total=13340 [2022-11-22 01:45:07,447 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 801 mSDsluCounter, 840 mSDsCounter, 0 mSdLazyCounter, 2533 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 801 SdHoareTripleChecker+Valid, 872 SdHoareTripleChecker+Invalid, 2589 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 2533 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:45:07,447 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [801 Valid, 872 Invalid, 2589 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 2533 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-11-22 01:45:07,448 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 568 states. [2022-11-22 01:45:07,456 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 568 to 356. [2022-11-22 01:45:07,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 356 states, 352 states have (on average 1.21875) internal successors, (429), 355 states have internal predecessors, (429), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:45:07,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 429 transitions. [2022-11-22 01:45:07,458 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 429 transitions. Word has length 37 [2022-11-22 01:45:07,458 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:45:07,458 INFO L495 AbstractCegarLoop]: Abstraction has 356 states and 429 transitions. [2022-11-22 01:45:07,458 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 61 states, 61 states have (on average 1.7868852459016393) internal successors, (109), 60 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:45:07,459 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 429 transitions. [2022-11-22 01:45:07,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-22 01:45:07,460 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:45:07,460 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:45:07,475 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-22 01:45:07,666 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32,24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:45:07,667 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:45:07,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:45:07,667 INFO L85 PathProgramCache]: Analyzing trace with hash 343772509, now seen corresponding path program 6 times [2022-11-22 01:45:07,667 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:45:07,667 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1708183823] [2022-11-22 01:45:07,667 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:45:07,667 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:45:07,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:45:09,031 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 0 proven. 125 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:45:09,031 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:45:09,032 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1708183823] [2022-11-22 01:45:09,032 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1708183823] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:45:09,032 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [843682868] [2022-11-22 01:45:09,032 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:45:09,032 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:45:09,032 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:45:09,035 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:45:09,064 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-22 01:45:09,234 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:45:09,234 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:45:09,238 INFO L263 TraceCheckSpWp]: Trace formula consists of 280 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-22 01:45:09,240 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:45:09,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:45:09,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:45:09,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:45:11,181 INFO L321 Elim1Store]: treesize reduction 23, result has 54.9 percent of original size [2022-11-22 01:45:11,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 61 treesize of output 50 [2022-11-22 01:45:11,253 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 55 proven. 45 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 01:45:11,253 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:45:12,110 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_867 (Array Int Int))) (let ((.cse0 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_867) |c_ULTIMATE.start_main_~nondetString1~0#1.base|))) (or (= (select .cse0 (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0) (= (select .cse0 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|) 0) (= (select .cse0 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)))) is different from false [2022-11-22 01:45:12,124 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:45:12,124 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 129 treesize of output 73 [2022-11-22 01:45:12,160 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:45:12,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 136 treesize of output 148 [2022-11-22 01:45:12,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 54 treesize of output 36 [2022-11-22 01:45:13,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:45:13,612 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 75 proven. 25 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 01:45:13,613 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [843682868] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:45:13,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1038299738] [2022-11-22 01:45:13,614 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 01:45:13,614 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:45:13,615 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:45:13,615 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:45:13,615 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:45:13,662 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:45:13,670 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:45:13,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:45:13,710 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:45:13,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:45:13,796 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:45:13,843 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:45:13,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:45:14,142 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:45:18,750 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12502#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-22 01:45:18,750 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:45:18,750 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:45:18,750 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 22, 22] total 64 [2022-11-22 01:45:18,750 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1311038184] [2022-11-22 01:45:18,750 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:45:18,751 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 64 states [2022-11-22 01:45:18,751 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:45:18,751 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2022-11-22 01:45:18,752 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=283, Invalid=4976, Unknown=1, NotChecked=142, Total=5402 [2022-11-22 01:45:18,752 INFO L87 Difference]: Start difference. First operand 356 states and 429 transitions. Second operand has 64 states, 64 states have (on average 1.453125) internal successors, (93), 64 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:45:49,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:45:49,905 INFO L93 Difference]: Finished difference Result 603 states and 658 transitions. [2022-11-22 01:45:49,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 78 states. [2022-11-22 01:45:49,906 INFO L78 Accepts]: Start accepts. Automaton has has 64 states, 64 states have (on average 1.453125) internal successors, (93), 64 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-22 01:45:49,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:45:49,908 INFO L225 Difference]: With dead ends: 603 [2022-11-22 01:45:49,908 INFO L226 Difference]: Without dead ends: 575 [2022-11-22 01:45:49,909 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 210 GetRequests, 62 SyntacticMatches, 1 SemanticMatches, 147 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 4516 ImplicationChecksByTransitivity, 34.2s TimeCoverageRelationStatistics Valid=2050, Invalid=19708, Unknown=2, NotChecked=292, Total=22052 [2022-11-22 01:45:49,910 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 2187 mSDsluCounter, 1800 mSDsCounter, 0 mSdLazyCounter, 4782 mSolverCounterSat, 191 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2187 SdHoareTripleChecker+Valid, 1856 SdHoareTripleChecker+Invalid, 5210 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 191 IncrementalHoareTripleChecker+Valid, 4782 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 236 IncrementalHoareTripleChecker+Unchecked, 5.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:45:49,910 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2187 Valid, 1856 Invalid, 5210 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [191 Valid, 4782 Invalid, 1 Unknown, 236 Unchecked, 5.4s Time] [2022-11-22 01:45:49,911 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 575 states. [2022-11-22 01:45:49,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 575 to 447. [2022-11-22 01:45:49,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 447 states, 443 states have (on average 1.1738148984198646) internal successors, (520), 446 states have internal predecessors, (520), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:45:49,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 447 states to 447 states and 520 transitions. [2022-11-22 01:45:49,923 INFO L78 Accepts]: Start accepts. Automaton has 447 states and 520 transitions. Word has length 38 [2022-11-22 01:45:49,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:45:49,924 INFO L495 AbstractCegarLoop]: Abstraction has 447 states and 520 transitions. [2022-11-22 01:45:49,924 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 64 states, 64 states have (on average 1.453125) internal successors, (93), 64 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:45:49,924 INFO L276 IsEmpty]: Start isEmpty. Operand 447 states and 520 transitions. [2022-11-22 01:45:49,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-22 01:45:49,925 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:45:49,925 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:45:49,933 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-22 01:45:50,131 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-11-22 01:45:50,131 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:45:50,132 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:45:50,132 INFO L85 PathProgramCache]: Analyzing trace with hash 565573687, now seen corresponding path program 2 times [2022-11-22 01:45:50,132 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:45:50,132 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [309143344] [2022-11-22 01:45:50,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:45:50,132 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:45:50,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:45:51,423 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 12 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:45:51,424 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:45:51,424 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [309143344] [2022-11-22 01:45:51,424 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [309143344] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:45:51,424 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2062640333] [2022-11-22 01:45:51,424 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:45:51,424 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:45:51,424 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:45:51,427 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:45:51,454 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-22 01:45:51,959 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-22 01:45:51,959 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:45:51,963 INFO L263 TraceCheckSpWp]: Trace formula consists of 276 conjuncts, 83 conjunts are in the unsatisfiable core [2022-11-22 01:45:51,966 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:45:52,021 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-22 01:45:52,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 01:45:52,038 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:45:52,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-22 01:45:52,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 26 [2022-11-22 01:45:53,275 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:45:53,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 01:45:53,855 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 7 proven. 24 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-22 01:45:53,855 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:45:55,065 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:45:55,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 25 [2022-11-22 01:45:55,078 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:45:55,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 36 treesize of output 35 [2022-11-22 01:45:55,090 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 7 [2022-11-22 01:45:56,818 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:45:56,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:45:56,943 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 7 proven. 24 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-22 01:45:56,943 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2062640333] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:45:56,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1638512245] [2022-11-22 01:45:56,945 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-22 01:45:56,945 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:45:56,945 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:45:56,945 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:45:56,945 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:45:56,992 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:45:56,996 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:45:56,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:45:57,038 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:45:57,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:45:57,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:45:57,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-22 01:45:57,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:45:57,240 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:45:57,338 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-22 01:45:57,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-22 01:45:57,512 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-22 01:45:57,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-22 01:45:58,210 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-22 01:45:58,219 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-22 01:45:58,316 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:45:58,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:45:58,438 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-22 01:45:58,438 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-22 01:45:58,620 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:45:58,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:45:58,740 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:45:58,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:45:58,898 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-22 01:45:58,916 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:46:06,887 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13991#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:46:06,887 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:46:06,887 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:46:06,888 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 56 [2022-11-22 01:46:06,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1250653536] [2022-11-22 01:46:06,888 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:46:06,888 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-11-22 01:46:06,888 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:46:06,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-11-22 01:46:06,889 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=410, Invalid=4846, Unknown=0, NotChecked=0, Total=5256 [2022-11-22 01:46:06,889 INFO L87 Difference]: Start difference. First operand 447 states and 520 transitions. Second operand has 57 states, 57 states have (on average 1.894736842105263) internal successors, (108), 56 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:46:26,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:46:26,803 INFO L93 Difference]: Finished difference Result 574 states and 667 transitions. [2022-11-22 01:46:26,803 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 73 states. [2022-11-22 01:46:26,803 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 57 states have (on average 1.894736842105263) internal successors, (108), 56 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-22 01:46:26,803 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:46:26,805 INFO L225 Difference]: With dead ends: 574 [2022-11-22 01:46:26,806 INFO L226 Difference]: Without dead ends: 547 [2022-11-22 01:46:26,807 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 59 SyntacticMatches, 0 SemanticMatches, 141 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5130 ImplicationChecksByTransitivity, 29.4s TimeCoverageRelationStatistics Valid=3238, Invalid=17068, Unknown=0, NotChecked=0, Total=20306 [2022-11-22 01:46:26,808 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 1388 mSDsluCounter, 235 mSDsCounter, 0 mSdLazyCounter, 1473 mSolverCounterSat, 158 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1388 SdHoareTripleChecker+Valid, 247 SdHoareTripleChecker+Invalid, 1631 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 158 IncrementalHoareTripleChecker+Valid, 1473 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-22 01:46:26,808 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1388 Valid, 247 Invalid, 1631 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [158 Valid, 1473 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-11-22 01:46:26,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 547 states. [2022-11-22 01:46:26,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 547 to 481. [2022-11-22 01:46:26,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 481 states, 477 states have (on average 1.1719077568134173) internal successors, (559), 480 states have internal predecessors, (559), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:46:26,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 481 states to 481 states and 559 transitions. [2022-11-22 01:46:26,818 INFO L78 Accepts]: Start accepts. Automaton has 481 states and 559 transitions. Word has length 38 [2022-11-22 01:46:26,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:46:26,818 INFO L495 AbstractCegarLoop]: Abstraction has 481 states and 559 transitions. [2022-11-22 01:46:26,818 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 57 states have (on average 1.894736842105263) internal successors, (108), 56 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:46:26,819 INFO L276 IsEmpty]: Start isEmpty. Operand 481 states and 559 transitions. [2022-11-22 01:46:26,819 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-22 01:46:26,819 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:46:26,820 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:46:26,830 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Ended with exit code 0 [2022-11-22 01:46:27,026 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-22 01:46:27,026 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:46:27,026 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:46:27,026 INFO L85 PathProgramCache]: Analyzing trace with hash -897604463, now seen corresponding path program 3 times [2022-11-22 01:46:27,026 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:46:27,026 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1035973055] [2022-11-22 01:46:27,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:46:27,027 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:46:27,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:46:28,071 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 16 proven. 50 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:46:28,071 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:46:28,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1035973055] [2022-11-22 01:46:28,072 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1035973055] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:46:28,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [692354288] [2022-11-22 01:46:28,072 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:46:28,072 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:46:28,072 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:46:28,073 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:46:28,098 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-22 01:46:28,351 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:46:28,351 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:46:28,355 INFO L263 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 100 conjunts are in the unsatisfiable core [2022-11-22 01:46:28,358 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:46:28,382 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-22 01:46:28,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 01:46:28,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:46:29,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-22 01:46:29,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 27 [2022-11-22 01:46:30,628 INFO L321 Elim1Store]: treesize reduction 12, result has 81.8 percent of original size [2022-11-22 01:46:30,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 7 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 49 treesize of output 72 [2022-11-22 01:46:31,055 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 0 proven. 67 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:46:31,056 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:46:32,259 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:46:32,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 105 treesize of output 63 [2022-11-22 01:46:32,290 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:46:32,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 115 treesize of output 121 [2022-11-22 01:46:32,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 45 treesize of output 29 [2022-11-22 01:46:34,619 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 1 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:46:34,620 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [692354288] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:46:34,620 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [798585966] [2022-11-22 01:46:34,621 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-22 01:46:34,621 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:46:34,621 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:46:34,621 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:46:34,621 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:46:34,660 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:46:34,667 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:46:34,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:46:34,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:46:34,735 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:46:34,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:46:34,818 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 01:46:34,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-22 01:46:34,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:46:34,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:46:34,993 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-22 01:46:34,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-22 01:46:35,171 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-22 01:46:35,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-22 01:46:35,903 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-22 01:46:35,914 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-22 01:46:35,993 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:46:35,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:46:36,075 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-22 01:46:36,090 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:46:42,502 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15498#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 01:46:42,502 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:46:42,502 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:46:42,502 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 25, 25] total 67 [2022-11-22 01:46:42,502 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1038588444] [2022-11-22 01:46:42,502 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:46:42,503 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 68 states [2022-11-22 01:46:42,503 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:46:42,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 68 interpolants. [2022-11-22 01:46:42,504 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=508, Invalid=6298, Unknown=0, NotChecked=0, Total=6806 [2022-11-22 01:46:42,504 INFO L87 Difference]: Start difference. First operand 481 states and 559 transitions. Second operand has 68 states, 67 states have (on average 1.7164179104477613) internal successors, (115), 68 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:47:01,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:47:01,945 INFO L93 Difference]: Finished difference Result 861 states and 974 transitions. [2022-11-22 01:47:01,946 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 78 states. [2022-11-22 01:47:01,946 INFO L78 Accepts]: Start accepts. Automaton has has 68 states, 67 states have (on average 1.7164179104477613) internal successors, (115), 68 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-22 01:47:01,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:47:01,947 INFO L225 Difference]: With dead ends: 861 [2022-11-22 01:47:01,947 INFO L226 Difference]: Without dead ends: 822 [2022-11-22 01:47:01,948 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 207 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 154 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6935 ImplicationChecksByTransitivity, 26.1s TimeCoverageRelationStatistics Valid=3146, Invalid=21034, Unknown=0, NotChecked=0, Total=24180 [2022-11-22 01:47:01,949 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 3206 mSDsluCounter, 601 mSDsCounter, 0 mSdLazyCounter, 3532 mSolverCounterSat, 167 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3206 SdHoareTripleChecker+Valid, 622 SdHoareTripleChecker+Invalid, 3699 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 167 IncrementalHoareTripleChecker+Valid, 3532 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:47:01,949 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3206 Valid, 622 Invalid, 3699 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [167 Valid, 3532 Invalid, 0 Unknown, 0 Unchecked, 4.3s Time] [2022-11-22 01:47:01,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 822 states. [2022-11-22 01:47:01,959 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 822 to 555. [2022-11-22 01:47:01,959 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 555 states, 551 states have (on average 1.1651542649727769) internal successors, (642), 554 states have internal predecessors, (642), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:47:01,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 555 states to 555 states and 642 transitions. [2022-11-22 01:47:01,961 INFO L78 Accepts]: Start accepts. Automaton has 555 states and 642 transitions. Word has length 39 [2022-11-22 01:47:01,961 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:47:01,961 INFO L495 AbstractCegarLoop]: Abstraction has 555 states and 642 transitions. [2022-11-22 01:47:01,962 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 68 states, 67 states have (on average 1.7164179104477613) internal successors, (115), 68 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:47:01,962 INFO L276 IsEmpty]: Start isEmpty. Operand 555 states and 642 transitions. [2022-11-22 01:47:01,963 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-22 01:47:01,963 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:47:01,963 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:47:01,971 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-22 01:47:02,168 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable35,27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:47:02,169 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:47:02,169 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:47:02,169 INFO L85 PathProgramCache]: Analyzing trace with hash 1168962394, now seen corresponding path program 7 times [2022-11-22 01:47:02,169 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:47:02,169 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1203731423] [2022-11-22 01:47:02,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:47:02,170 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:47:02,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:47:03,479 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 0 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:47:03,479 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:47:03,479 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1203731423] [2022-11-22 01:47:03,480 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1203731423] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:47:03,480 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [338884473] [2022-11-22 01:47:03,480 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:47:03,480 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:47:03,480 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:47:03,481 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:47:03,485 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-22 01:47:03,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:47:03,648 INFO L263 TraceCheckSpWp]: Trace formula consists of 293 conjuncts, 89 conjunts are in the unsatisfiable core [2022-11-22 01:47:03,651 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:47:03,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:47:04,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:47:04,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-22 01:47:06,064 INFO L321 Elim1Store]: treesize reduction 27, result has 55.7 percent of original size [2022-11-22 01:47:06,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 71 treesize of output 60 [2022-11-22 01:47:06,129 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 54 proven. 66 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:47:06,130 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:47:07,472 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:47:07,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 155 treesize of output 85 [2022-11-22 01:47:07,508 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:47:07,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 161 treesize of output 177 [2022-11-22 01:47:07,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 15 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 0 case distinctions, treesize of input 65 treesize of output 43 [2022-11-22 01:47:09,683 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:47:09,686 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-22 01:47:09,722 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 84 proven. 36 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:47:09,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [338884473] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:47:09,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1106084202] [2022-11-22 01:47:09,724 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 01:47:09,724 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:47:09,724 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:47:09,725 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:47:09,725 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:47:09,760 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:47:09,764 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:47:09,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:47:09,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:47:09,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:47:09,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:47:09,915 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:47:09,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:47:10,224 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:47:14,887 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17378#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-22 01:47:14,887 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:47:14,887 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:47:14,887 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 24, 24] total 69 [2022-11-22 01:47:14,887 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [188128445] [2022-11-22 01:47:14,887 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:47:14,888 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 69 states [2022-11-22 01:47:14,888 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:47:14,888 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 69 interpolants. [2022-11-22 01:47:14,889 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=369, Invalid=5793, Unknown=0, NotChecked=0, Total=6162 [2022-11-22 01:47:14,889 INFO L87 Difference]: Start difference. First operand 555 states and 642 transitions. Second operand has 69 states, 69 states have (on average 1.4927536231884058) internal successors, (103), 69 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:47:49,855 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:47:59,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:47:59,570 INFO L93 Difference]: Finished difference Result 825 states and 891 transitions. [2022-11-22 01:47:59,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 112 states. [2022-11-22 01:47:59,571 INFO L78 Accepts]: Start accepts. Automaton has has 69 states, 69 states have (on average 1.4927536231884058) internal successors, (103), 69 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-22 01:47:59,571 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:47:59,574 INFO L225 Difference]: With dead ends: 825 [2022-11-22 01:47:59,574 INFO L226 Difference]: Without dead ends: 794 [2022-11-22 01:47:59,575 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 251 GetRequests, 64 SyntacticMatches, 1 SemanticMatches, 186 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8347 ImplicationChecksByTransitivity, 45.7s TimeCoverageRelationStatistics Valid=4354, Invalid=30801, Unknown=1, NotChecked=0, Total=35156 [2022-11-22 01:47:59,576 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 2249 mSDsluCounter, 1867 mSDsCounter, 0 mSdLazyCounter, 4941 mSolverCounterSat, 139 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2249 SdHoareTripleChecker+Valid, 1930 SdHoareTripleChecker+Invalid, 5081 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 139 IncrementalHoareTripleChecker+Valid, 4941 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.5s IncrementalHoareTripleChecker+Time [2022-11-22 01:47:59,576 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2249 Valid, 1930 Invalid, 5081 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [139 Valid, 4941 Invalid, 1 Unknown, 0 Unchecked, 8.5s Time] [2022-11-22 01:47:59,577 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 794 states. [2022-11-22 01:47:59,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 794 to 633. [2022-11-22 01:47:59,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 633 states, 629 states have (on average 1.1478537360890302) internal successors, (722), 632 states have internal predecessors, (722), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:47:59,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 633 states to 633 states and 722 transitions. [2022-11-22 01:47:59,589 INFO L78 Accepts]: Start accepts. Automaton has 633 states and 722 transitions. Word has length 40 [2022-11-22 01:47:59,589 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:47:59,589 INFO L495 AbstractCegarLoop]: Abstraction has 633 states and 722 transitions. [2022-11-22 01:47:59,589 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 69 states, 69 states have (on average 1.4927536231884058) internal successors, (103), 69 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:47:59,589 INFO L276 IsEmpty]: Start isEmpty. Operand 633 states and 722 transitions. [2022-11-22 01:47:59,590 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-22 01:47:59,590 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:47:59,591 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:47:59,599 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-22 01:47:59,796 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-22 01:47:59,796 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:47:59,797 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:47:59,797 INFO L85 PathProgramCache]: Analyzing trace with hash 1651924211, now seen corresponding path program 5 times [2022-11-22 01:47:59,797 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:47:59,797 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [392955525] [2022-11-22 01:47:59,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:47:59,797 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:47:59,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:48:00,281 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 1 proven. 29 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:48:00,281 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:48:00,281 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [392955525] [2022-11-22 01:48:00,282 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [392955525] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:48:00,282 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1482170659] [2022-11-22 01:48:00,282 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:48:00,282 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:48:00,282 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:48:00,283 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:48:00,307 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-22 01:48:00,612 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-22 01:48:00,612 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:48:00,615 INFO L263 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-22 01:48:00,616 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:48:00,628 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:48:00,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:48:00,889 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 4 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:48:00,889 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:48:01,337 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 4 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 01:48:01,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1482170659] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:48:01,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1251807021] [2022-11-22 01:48:01,339 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 01:48:01,339 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:48:01,339 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:48:01,339 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:48:01,339 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:48:01,387 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:48:01,393 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:48:01,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:48:01,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:48:01,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:48:01,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:48:01,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-22 01:48:01,579 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:48:01,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:48:01,697 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-22 01:48:01,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-22 01:48:01,869 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-22 01:48:01,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-22 01:48:02,809 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:48:02,811 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:48:02,816 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:48:02,914 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-22 01:48:02,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1026 treesize of output 1019 [2022-11-22 01:48:03,149 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:48:03,152 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:48:03,162 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:48:03,173 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-22 01:48:03,427 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-22 01:48:03,482 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:48:03,482 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:48:03,620 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:48:03,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:48:03,735 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-22 01:48:03,756 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:48:10,943 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19334#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-22 01:48:10,943 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:48:10,943 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:48:10,943 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 35 [2022-11-22 01:48:10,943 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [324468084] [2022-11-22 01:48:10,943 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:48:10,944 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-22 01:48:10,944 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:48:10,944 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-22 01:48:10,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=273, Invalid=2379, Unknown=0, NotChecked=0, Total=2652 [2022-11-22 01:48:10,945 INFO L87 Difference]: Start difference. First operand 633 states and 722 transitions. Second operand has 36 states, 35 states have (on average 2.7714285714285714) internal successors, (97), 36 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:48:11,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:48:11,899 INFO L93 Difference]: Finished difference Result 717 states and 793 transitions. [2022-11-22 01:48:11,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-22 01:48:11,899 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 35 states have (on average 2.7714285714285714) internal successors, (97), 36 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-22 01:48:11,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:48:11,902 INFO L225 Difference]: With dead ends: 717 [2022-11-22 01:48:11,903 INFO L226 Difference]: Without dead ends: 717 [2022-11-22 01:48:11,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1112 ImplicationChecksByTransitivity, 8.3s TimeCoverageRelationStatistics Valid=573, Invalid=3587, Unknown=0, NotChecked=0, Total=4160 [2022-11-22 01:48:11,904 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 455 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 671 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 455 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 689 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 671 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 01:48:11,904 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [455 Valid, 224 Invalid, 689 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 671 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-22 01:48:11,905 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 717 states. [2022-11-22 01:48:11,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 717 to 675. [2022-11-22 01:48:11,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 675 states, 671 states have (on average 1.1326378539493294) internal successors, (760), 674 states have internal predecessors, (760), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:48:11,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 675 states to 675 states and 760 transitions. [2022-11-22 01:48:11,915 INFO L78 Accepts]: Start accepts. Automaton has 675 states and 760 transitions. Word has length 40 [2022-11-22 01:48:11,915 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:48:11,915 INFO L495 AbstractCegarLoop]: Abstraction has 675 states and 760 transitions. [2022-11-22 01:48:11,916 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 35 states have (on average 2.7714285714285714) internal successors, (97), 36 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:48:11,916 INFO L276 IsEmpty]: Start isEmpty. Operand 675 states and 760 transitions. [2022-11-22 01:48:11,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-22 01:48:11,917 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:48:11,917 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:48:11,931 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-22 01:48:12,124 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-22 01:48:12,124 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-22 01:48:12,124 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:48:12,124 INFO L85 PathProgramCache]: Analyzing trace with hash -392507881, now seen corresponding path program 8 times [2022-11-22 01:48:12,124 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:48:12,125 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [775853242] [2022-11-22 01:48:12,125 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:48:12,125 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:48:12,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:48:13,543 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 0 proven. 149 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:48:13,544 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:48:13,544 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [775853242] [2022-11-22 01:48:13,544 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [775853242] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:48:13,544 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2042539670] [2022-11-22 01:48:13,544 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:48:13,545 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:48:13,545 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:48:13,550 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:48:13,551 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f841193a-84fc-4292-9395-03b8c8400975/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-22 01:48:13,892 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-11-22 01:48:13,892 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:48:13,896 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 92 conjunts are in the unsatisfiable core [2022-11-22 01:48:13,899 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:48:13,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:48:13,954 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:48:14,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 16 [2022-11-22 01:48:24,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 25 [2022-11-22 01:48:25,947 INFO L321 Elim1Store]: treesize reduction 4, result has 86.7 percent of original size [2022-11-22 01:48:25,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 31 treesize of output 36 [2022-11-22 01:48:26,404 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 23 proven. 126 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:48:26,405 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:48:27,727 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:48:27,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 51 treesize of output 37 [2022-11-22 01:48:27,747 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:48:27,747 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 61 treesize of output 61 [2022-11-22 01:48:27,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 15 [2022-11-22 01:48:29,617 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:48:29,624 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:48:29,631 WARN L207 Elim1Store]: Array PQE input equivalent to true [2022-11-22 01:48:29,632 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 60 proven. 89 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:48:29,633 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2042539670] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:48:29,633 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1614647106] [2022-11-22 01:48:29,634 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-22 01:48:29,634 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:48:29,634 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:48:29,634 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:48:29,635 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:48:29,683 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:48:29,687 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:48:29,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:48:29,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:48:29,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:48:29,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:48:29,833 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-22 01:48:29,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-22 01:48:30,194 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:48:35,078 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21089#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-22 01:48:35,079 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:48:35,079 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:48:35,079 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 26, 26] total 75 [2022-11-22 01:48:35,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1209411380] [2022-11-22 01:48:35,079 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:48:35,079 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 75 states [2022-11-22 01:48:35,080 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:48:35,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 75 interpolants. [2022-11-22 01:48:35,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=578, Invalid=6553, Unknown=9, NotChecked=0, Total=7140 [2022-11-22 01:48:35,081 INFO L87 Difference]: Start difference. First operand 675 states and 760 transitions. Second operand has 75 states, 75 states have (on average 1.64) internal successors, (123), 75 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:48:38,808 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:48:43,835 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.53s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:48:45,484 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.62s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:48:52,320 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.19s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:48:54,792 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2022-11-22 01:49:00,032 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.18s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:49:01,353 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:49:04,365 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:49:05,676 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.07s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:49:20,758 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:50:04,084 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:50:06,689 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.15s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:50:30,769 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.13s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:50:48,620 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.02s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:51:42,269 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.82s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:51:48,994 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.20s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 01:52:09,628 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.21s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0]