./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4cb6276eff0c60579b1d5f7034948eb4f53891709ff48cdd11b3329ec3c4cc2e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-22 02:32:19,793 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-22 02:32:19,795 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-22 02:32:19,823 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-22 02:32:19,824 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-22 02:32:19,827 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-22 02:32:19,830 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-22 02:32:19,833 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-22 02:32:19,836 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-22 02:32:19,842 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-22 02:32:19,843 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-22 02:32:19,845 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-22 02:32:19,846 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-22 02:32:19,851 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-22 02:32:19,853 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-22 02:32:19,855 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-22 02:32:19,857 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-22 02:32:19,858 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-22 02:32:19,859 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-22 02:32:19,866 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-22 02:32:19,867 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-22 02:32:19,870 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-22 02:32:19,871 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-22 02:32:19,872 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-22 02:32:19,882 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-22 02:32:19,883 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-22 02:32:19,883 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-22 02:32:19,885 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-22 02:32:19,887 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-22 02:32:19,888 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-22 02:32:19,889 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-22 02:32:19,890 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-22 02:32:19,892 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-22 02:32:19,894 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-22 02:32:19,895 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-22 02:32:19,895 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-22 02:32:19,896 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-22 02:32:19,896 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-22 02:32:19,897 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-22 02:32:19,898 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-22 02:32:19,899 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-22 02:32:19,900 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-22 02:32:19,942 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-22 02:32:19,942 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-22 02:32:19,943 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-22 02:32:19,943 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-22 02:32:19,945 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-22 02:32:19,945 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-22 02:32:19,945 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-22 02:32:19,946 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-22 02:32:19,946 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-22 02:32:19,946 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-22 02:32:19,947 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-22 02:32:19,948 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-22 02:32:19,948 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-22 02:32:19,948 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-22 02:32:19,948 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-22 02:32:19,949 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-22 02:32:19,949 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-22 02:32:19,949 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-22 02:32:19,950 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-22 02:32:19,950 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-22 02:32:19,951 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-22 02:32:19,951 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-22 02:32:19,951 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-22 02:32:19,952 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-22 02:32:19,952 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-22 02:32:19,953 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-22 02:32:19,953 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-22 02:32:19,953 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-22 02:32:19,954 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-22 02:32:19,954 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-22 02:32:19,955 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-22 02:32:19,955 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-22 02:32:19,955 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-22 02:32:19,956 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-22 02:32:19,956 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-22 02:32:19,956 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 02:32:19,957 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-22 02:32:19,957 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-22 02:32:19,957 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-22 02:32:19,958 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-22 02:32:19,958 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-22 02:32:19,958 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-22 02:32:19,958 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4cb6276eff0c60579b1d5f7034948eb4f53891709ff48cdd11b3329ec3c4cc2e [2022-11-22 02:32:20,238 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-22 02:32:20,275 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-22 02:32:20,278 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-22 02:32:20,279 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-22 02:32:20,279 INFO L275 PluginConnector]: CDTParser initialized [2022-11-22 02:32:20,281 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i [2022-11-22 02:32:23,379 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-22 02:32:23,670 INFO L351 CDTParser]: Found 1 translation units. [2022-11-22 02:32:23,671 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/sv-benchmarks/c/array-memsafety/substring-alloca-2.i [2022-11-22 02:32:23,694 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/data/07e3374d4/bcfa8ced72a74ed29999f464ca977a7f/FLAG35b1f7748 [2022-11-22 02:32:23,713 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/data/07e3374d4/bcfa8ced72a74ed29999f464ca977a7f [2022-11-22 02:32:23,719 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-22 02:32:23,720 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-22 02:32:23,726 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-22 02:32:23,726 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-22 02:32:23,731 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-22 02:32:23,732 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 02:32:23" (1/1) ... [2022-11-22 02:32:23,733 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@605cd76d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:23, skipping insertion in model container [2022-11-22 02:32:23,733 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 02:32:23" (1/1) ... [2022-11-22 02:32:23,740 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-22 02:32:23,792 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-22 02:32:24,045 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 02:32:24,062 INFO L203 MainTranslator]: Completed pre-run [2022-11-22 02:32:24,130 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 02:32:24,161 INFO L208 MainTranslator]: Completed translation [2022-11-22 02:32:24,162 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24 WrapperNode [2022-11-22 02:32:24,162 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-22 02:32:24,164 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-22 02:32:24,164 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-22 02:32:24,164 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-22 02:32:24,172 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (1/1) ... [2022-11-22 02:32:24,203 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (1/1) ... [2022-11-22 02:32:24,223 INFO L138 Inliner]: procedures = 117, calls = 18, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 103 [2022-11-22 02:32:24,223 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-22 02:32:24,224 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-22 02:32:24,224 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-22 02:32:24,224 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-22 02:32:24,232 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (1/1) ... [2022-11-22 02:32:24,233 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (1/1) ... [2022-11-22 02:32:24,235 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (1/1) ... [2022-11-22 02:32:24,235 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (1/1) ... [2022-11-22 02:32:24,241 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (1/1) ... [2022-11-22 02:32:24,244 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (1/1) ... [2022-11-22 02:32:24,246 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (1/1) ... [2022-11-22 02:32:24,247 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (1/1) ... [2022-11-22 02:32:24,249 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-22 02:32:24,249 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-22 02:32:24,249 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-22 02:32:24,250 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-22 02:32:24,250 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (1/1) ... [2022-11-22 02:32:24,257 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 02:32:24,269 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:32:24,282 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-22 02:32:24,296 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-22 02:32:24,331 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-22 02:32:24,331 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-22 02:32:24,331 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-22 02:32:24,332 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-22 02:32:24,332 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-22 02:32:24,332 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-22 02:32:24,447 INFO L235 CfgBuilder]: Building ICFG [2022-11-22 02:32:24,449 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-22 02:32:24,836 INFO L276 CfgBuilder]: Performing block encoding [2022-11-22 02:32:24,941 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-22 02:32:24,942 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-22 02:32:24,952 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 02:32:24 BoogieIcfgContainer [2022-11-22 02:32:24,952 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-22 02:32:24,960 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-22 02:32:24,960 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-22 02:32:24,963 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-22 02:32:24,964 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.11 02:32:23" (1/3) ... [2022-11-22 02:32:24,964 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7af8115 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 02:32:24, skipping insertion in model container [2022-11-22 02:32:24,965 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 02:32:24" (2/3) ... [2022-11-22 02:32:24,965 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7af8115 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 02:32:24, skipping insertion in model container [2022-11-22 02:32:24,965 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 02:32:24" (3/3) ... [2022-11-22 02:32:24,966 INFO L112 eAbstractionObserver]: Analyzing ICFG substring-alloca-2.i [2022-11-22 02:32:25,002 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-22 02:32:25,002 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 19 error locations. [2022-11-22 02:32:25,064 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-22 02:32:25,070 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1f9161eb, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-22 02:32:25,071 INFO L358 AbstractCegarLoop]: Starting to check reachability of 19 error locations. [2022-11-22 02:32:25,075 INFO L276 IsEmpty]: Start isEmpty. Operand has 39 states, 19 states have (on average 2.4210526315789473) internal successors, (46), 38 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:25,080 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-22 02:32:25,080 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:25,080 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-22 02:32:25,081 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:25,086 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:25,086 INFO L85 PathProgramCache]: Analyzing trace with hash 158342, now seen corresponding path program 1 times [2022-11-22 02:32:25,094 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:25,094 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [556743510] [2022-11-22 02:32:25,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:25,095 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:25,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:25,605 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:25,606 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:25,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [556743510] [2022-11-22 02:32:25,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [556743510] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:25,607 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:25,608 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-22 02:32:25,609 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1745990169] [2022-11-22 02:32:25,610 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:25,614 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 02:32:25,615 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:25,668 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 02:32:25,669 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:32:25,671 INFO L87 Difference]: Start difference. First operand has 39 states, 19 states have (on average 2.4210526315789473) internal successors, (46), 38 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:25,774 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:25,775 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-11-22 02:32:25,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 02:32:25,786 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-22 02:32:25,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:25,794 INFO L225 Difference]: With dead ends: 37 [2022-11-22 02:32:25,794 INFO L226 Difference]: Without dead ends: 36 [2022-11-22 02:32:25,796 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:32:25,799 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:25,800 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 19 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:32:25,819 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-22 02:32:25,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-22 02:32:25,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:25,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-22 02:32:25,833 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 3 [2022-11-22 02:32:25,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:25,834 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-22 02:32:25,834 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:25,834 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-22 02:32:25,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-22 02:32:25,835 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:25,835 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-22 02:32:25,835 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-22 02:32:25,836 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:25,836 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:25,836 INFO L85 PathProgramCache]: Analyzing trace with hash 158343, now seen corresponding path program 1 times [2022-11-22 02:32:25,837 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:25,837 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [884966966] [2022-11-22 02:32:25,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:25,837 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:25,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:26,124 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:26,125 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:26,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [884966966] [2022-11-22 02:32:26,126 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [884966966] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:26,126 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:26,126 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 02:32:26,126 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [331630624] [2022-11-22 02:32:26,126 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:26,128 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 02:32:26,128 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:26,129 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 02:32:26,129 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:32:26,129 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:26,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:26,312 INFO L93 Difference]: Finished difference Result 70 states and 80 transitions. [2022-11-22 02:32:26,313 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 02:32:26,313 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-22 02:32:26,313 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:26,316 INFO L225 Difference]: With dead ends: 70 [2022-11-22 02:32:26,316 INFO L226 Difference]: Without dead ends: 70 [2022-11-22 02:32:26,319 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:32:26,321 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 38 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:26,321 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 58 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:32:26,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-22 02:32:26,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 38. [2022-11-22 02:32:26,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 21 states have (on average 2.0952380952380953) internal successors, (44), 37 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:26,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 44 transitions. [2022-11-22 02:32:26,327 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 44 transitions. Word has length 3 [2022-11-22 02:32:26,327 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:26,327 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 44 transitions. [2022-11-22 02:32:26,328 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:26,328 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 44 transitions. [2022-11-22 02:32:26,328 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 02:32:26,328 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:26,328 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 02:32:26,329 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-22 02:32:26,329 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:26,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:26,329 INFO L85 PathProgramCache]: Analyzing trace with hash 5013776, now seen corresponding path program 1 times [2022-11-22 02:32:26,330 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:26,330 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1245981472] [2022-11-22 02:32:26,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:26,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:26,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:26,675 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:26,676 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:26,676 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1245981472] [2022-11-22 02:32:26,676 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1245981472] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:26,676 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:26,676 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 02:32:26,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1610200504] [2022-11-22 02:32:26,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:26,679 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 02:32:26,679 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:26,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 02:32:26,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:32:26,681 INFO L87 Difference]: Start difference. First operand 38 states and 44 transitions. Second operand has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:26,739 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:26,739 INFO L93 Difference]: Finished difference Result 37 states and 43 transitions. [2022-11-22 02:32:26,739 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 02:32:26,740 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 02:32:26,740 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:26,742 INFO L225 Difference]: With dead ends: 37 [2022-11-22 02:32:26,743 INFO L226 Difference]: Without dead ends: 37 [2022-11-22 02:32:26,744 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:32:26,752 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 39 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:26,754 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 19 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:32:26,756 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-22 02:32:26,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 37. [2022-11-22 02:32:26,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:26,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-22 02:32:26,762 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 4 [2022-11-22 02:32:26,762 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:26,763 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-22 02:32:26,763 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:26,763 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-22 02:32:26,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 02:32:26,764 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:26,764 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 02:32:26,764 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-22 02:32:26,764 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:26,765 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:26,765 INFO L85 PathProgramCache]: Analyzing trace with hash 5011007, now seen corresponding path program 1 times [2022-11-22 02:32:26,765 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:26,765 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1094063795] [2022-11-22 02:32:26,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:26,766 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:26,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:26,848 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:26,848 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:26,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1094063795] [2022-11-22 02:32:26,848 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1094063795] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:26,849 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:26,849 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-22 02:32:26,849 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1705999152] [2022-11-22 02:32:26,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:26,850 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 02:32:26,850 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:26,850 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 02:32:26,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:32:26,851 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:26,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:26,899 INFO L93 Difference]: Finished difference Result 35 states and 41 transitions. [2022-11-22 02:32:26,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 02:32:26,901 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 02:32:26,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:26,901 INFO L225 Difference]: With dead ends: 35 [2022-11-22 02:32:26,902 INFO L226 Difference]: Without dead ends: 35 [2022-11-22 02:32:26,902 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:32:26,908 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 33 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:26,908 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 18 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:32:26,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-11-22 02:32:26,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 35. [2022-11-22 02:32:26,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:26,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-11-22 02:32:26,912 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 4 [2022-11-22 02:32:26,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:26,912 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-11-22 02:32:26,912 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:26,913 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-11-22 02:32:26,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 02:32:26,913 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:26,913 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 02:32:26,913 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-22 02:32:26,914 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:26,914 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:26,914 INFO L85 PathProgramCache]: Analyzing trace with hash 5011008, now seen corresponding path program 1 times [2022-11-22 02:32:26,914 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:26,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [953263323] [2022-11-22 02:32:26,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:26,915 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:26,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:27,140 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:27,140 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:27,141 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [953263323] [2022-11-22 02:32:27,141 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [953263323] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:27,141 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:27,141 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:32:27,141 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296506726] [2022-11-22 02:32:27,141 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:27,143 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 02:32:27,143 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:27,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 02:32:27,145 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:32:27,145 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:27,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:27,280 INFO L93 Difference]: Finished difference Result 63 states and 73 transitions. [2022-11-22 02:32:27,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 02:32:27,281 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 02:32:27,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:27,281 INFO L225 Difference]: With dead ends: 63 [2022-11-22 02:32:27,282 INFO L226 Difference]: Without dead ends: 63 [2022-11-22 02:32:27,282 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-22 02:32:27,283 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 100 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:27,283 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [100 Valid, 51 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:32:27,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-11-22 02:32:27,286 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 37. [2022-11-22 02:32:27,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 23 states have (on average 1.9130434782608696) internal successors, (44), 36 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:27,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 44 transitions. [2022-11-22 02:32:27,288 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 44 transitions. Word has length 4 [2022-11-22 02:32:27,288 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:27,288 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 44 transitions. [2022-11-22 02:32:27,288 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:27,288 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 44 transitions. [2022-11-22 02:32:27,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 02:32:27,289 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:27,289 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-22 02:32:27,289 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-22 02:32:27,289 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:27,290 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:27,290 INFO L85 PathProgramCache]: Analyzing trace with hash 155427050, now seen corresponding path program 1 times [2022-11-22 02:32:27,290 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:27,290 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [246462204] [2022-11-22 02:32:27,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:27,290 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:27,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:27,532 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:27,532 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:27,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [246462204] [2022-11-22 02:32:27,533 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [246462204] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:27,533 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:27,533 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:32:27,533 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1054699008] [2022-11-22 02:32:27,533 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:27,534 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 02:32:27,534 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:27,534 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 02:32:27,534 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:32:27,535 INFO L87 Difference]: Start difference. First operand 37 states and 44 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:27,589 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:27,589 INFO L93 Difference]: Finished difference Result 36 states and 43 transitions. [2022-11-22 02:32:27,590 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 02:32:27,590 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 02:32:27,590 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:27,591 INFO L225 Difference]: With dead ends: 36 [2022-11-22 02:32:27,591 INFO L226 Difference]: Without dead ends: 36 [2022-11-22 02:32:27,591 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:32:27,592 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 70 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:27,593 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 17 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:32:27,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-22 02:32:27,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-22 02:32:27,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 23 states have (on average 1.8695652173913044) internal successors, (43), 35 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:27,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 43 transitions. [2022-11-22 02:32:27,597 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 43 transitions. Word has length 5 [2022-11-22 02:32:27,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:27,597 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 43 transitions. [2022-11-22 02:32:27,598 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:27,598 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 43 transitions. [2022-11-22 02:32:27,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-22 02:32:27,598 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:27,599 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1] [2022-11-22 02:32:27,599 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-22 02:32:27,599 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:27,600 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:27,600 INFO L85 PathProgramCache]: Analyzing trace with hash 152263501, now seen corresponding path program 1 times [2022-11-22 02:32:27,600 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:27,600 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1738323503] [2022-11-22 02:32:27,601 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:27,601 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:27,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:27,822 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:27,823 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:27,823 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1738323503] [2022-11-22 02:32:27,823 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1738323503] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:32:27,823 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [384031920] [2022-11-22 02:32:27,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:27,824 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:32:27,825 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:32:27,830 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:32:27,859 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-22 02:32:27,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:27,917 INFO L263 TraceCheckSpWp]: Trace formula consists of 67 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-22 02:32:27,924 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:32:28,005 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:32:28,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-22 02:32:28,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:32:28,229 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:28,229 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:32:28,396 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:28,396 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [384031920] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:32:28,396 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [281704394] [2022-11-22 02:32:28,416 INFO L159 IcfgInterpreter]: Started Sifa with 4 locations of interest [2022-11-22 02:32:28,416 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:32:28,422 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:32:28,427 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:32:28,428 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:32:28,496 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:32:28,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:32:28,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:32:28,700 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:28,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:28,818 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:32:29,222 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '602#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |#NULL.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:32:29,222 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:32:29,222 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:32:29,222 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [3, 3, 3] total 9 [2022-11-22 02:32:29,223 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [821321597] [2022-11-22 02:32:29,223 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:32:29,223 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-22 02:32:29,223 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:29,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-22 02:32:29,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-11-22 02:32:29,224 INFO L87 Difference]: Start difference. First operand 36 states and 43 transitions. Second operand has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:29,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:29,631 INFO L93 Difference]: Finished difference Result 96 states and 114 transitions. [2022-11-22 02:32:29,632 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 02:32:29,632 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-22 02:32:29,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:29,633 INFO L225 Difference]: With dead ends: 96 [2022-11-22 02:32:29,633 INFO L226 Difference]: Without dead ends: 96 [2022-11-22 02:32:29,633 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=70, Invalid=202, Unknown=0, NotChecked=0, Total=272 [2022-11-22 02:32:29,634 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 201 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 229 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 234 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 229 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:29,634 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [201 Valid, 221 Invalid, 234 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 229 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:32:29,634 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2022-11-22 02:32:29,636 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 33. [2022-11-22 02:32:29,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 21 states have (on average 1.8571428571428572) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:29,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-11-22 02:32:29,637 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 5 [2022-11-22 02:32:29,637 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:29,637 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-11-22 02:32:29,637 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:29,638 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-11-22 02:32:29,638 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-22 02:32:29,638 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:29,638 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-22 02:32:29,649 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-22 02:32:29,838 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:32:29,839 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:29,839 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:29,840 INFO L85 PathProgramCache]: Analyzing trace with hash 523273240, now seen corresponding path program 1 times [2022-11-22 02:32:29,840 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:29,840 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [50633652] [2022-11-22 02:32:29,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:29,840 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:29,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:29,928 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:29,928 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:29,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [50633652] [2022-11-22 02:32:29,929 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [50633652] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:29,929 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:29,929 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:32:29,929 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [273106127] [2022-11-22 02:32:29,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:29,930 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 02:32:29,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:29,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 02:32:29,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:32:29,931 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:29,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:29,997 INFO L93 Difference]: Finished difference Result 55 states and 64 transitions. [2022-11-22 02:32:29,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 02:32:29,997 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-22 02:32:29,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:29,998 INFO L225 Difference]: With dead ends: 55 [2022-11-22 02:32:29,998 INFO L226 Difference]: Without dead ends: 55 [2022-11-22 02:32:29,999 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-22 02:32:29,999 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 84 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:30,000 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 30 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:32:30,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-22 02:32:30,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 34. [2022-11-22 02:32:30,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 33 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:30,003 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 41 transitions. [2022-11-22 02:32:30,003 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 41 transitions. Word has length 6 [2022-11-22 02:32:30,004 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:30,004 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 41 transitions. [2022-11-22 02:32:30,004 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:30,004 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 41 transitions. [2022-11-22 02:32:30,004 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-22 02:32:30,005 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:30,005 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-22 02:32:30,005 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-22 02:32:30,005 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:30,006 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:30,006 INFO L85 PathProgramCache]: Analyzing trace with hash 523273239, now seen corresponding path program 1 times [2022-11-22 02:32:30,006 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:30,006 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [87572073] [2022-11-22 02:32:30,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:30,007 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:30,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:30,050 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:30,050 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:30,051 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [87572073] [2022-11-22 02:32:30,051 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [87572073] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:30,051 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:30,051 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:32:30,051 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1633131680] [2022-11-22 02:32:30,052 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:30,052 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 02:32:30,052 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:30,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 02:32:30,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:32:30,053 INFO L87 Difference]: Start difference. First operand 34 states and 41 transitions. Second operand has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:30,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:30,095 INFO L93 Difference]: Finished difference Result 33 states and 39 transitions. [2022-11-22 02:32:30,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 02:32:30,096 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-22 02:32:30,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:30,096 INFO L225 Difference]: With dead ends: 33 [2022-11-22 02:32:30,097 INFO L226 Difference]: Without dead ends: 33 [2022-11-22 02:32:30,097 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:32:30,098 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 53 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:30,098 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 18 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:32:30,099 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-11-22 02:32:30,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 33. [2022-11-22 02:32:30,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:30,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-11-22 02:32:30,101 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 6 [2022-11-22 02:32:30,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:30,101 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-11-22 02:32:30,102 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:30,102 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-11-22 02:32:30,102 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-22 02:32:30,102 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:30,103 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-22 02:32:30,103 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-22 02:32:30,103 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:30,103 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:30,104 INFO L85 PathProgramCache]: Analyzing trace with hash 520684782, now seen corresponding path program 1 times [2022-11-22 02:32:30,104 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:30,104 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [430556180] [2022-11-22 02:32:30,104 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:30,104 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:30,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:30,325 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:30,325 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:30,325 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [430556180] [2022-11-22 02:32:30,325 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [430556180] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:32:30,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1408015122] [2022-11-22 02:32:30,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:30,326 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:32:30,326 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:32:30,327 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:32:30,359 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-22 02:32:30,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:30,418 INFO L263 TraceCheckSpWp]: Trace formula consists of 70 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-22 02:32:30,422 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:32:30,467 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 02:32:30,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 02:32:30,654 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:30,654 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:32:30,803 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:30,804 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1408015122] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:32:30,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2023126023] [2022-11-22 02:32:30,806 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-22 02:32:30,806 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:32:30,807 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:32:30,807 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:32:30,807 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:32:30,834 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:32:30,836 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:32:30,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:32:30,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:30,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:31,001 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:32:31,563 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '952#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet18#1|)) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_main_#t~nondet18#1| 127) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:32:31,564 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:32:31,564 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:32:31,564 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2022-11-22 02:32:31,564 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1809596234] [2022-11-22 02:32:31,564 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:32:31,565 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-22 02:32:31,565 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:31,565 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-22 02:32:31,565 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=238, Unknown=0, NotChecked=0, Total=306 [2022-11-22 02:32:31,566 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:31,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:31,880 INFO L93 Difference]: Finished difference Result 83 states and 96 transitions. [2022-11-22 02:32:31,881 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-22 02:32:31,881 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-22 02:32:31,881 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:31,881 INFO L225 Difference]: With dead ends: 83 [2022-11-22 02:32:31,882 INFO L226 Difference]: Without dead ends: 83 [2022-11-22 02:32:31,882 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=103, Invalid=317, Unknown=0, NotChecked=0, Total=420 [2022-11-22 02:32:31,883 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 268 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 268 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 183 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:31,883 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [268 Valid, 172 Invalid, 183 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 02:32:31,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-11-22 02:32:31,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 30. [2022-11-22 02:32:31,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 20 states have (on average 1.75) internal successors, (35), 29 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:31,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 35 transitions. [2022-11-22 02:32:31,886 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 35 transitions. Word has length 6 [2022-11-22 02:32:31,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:31,886 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 35 transitions. [2022-11-22 02:32:31,887 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:31,887 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 35 transitions. [2022-11-22 02:32:31,887 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-22 02:32:31,887 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:31,887 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:31,899 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-22 02:32:32,094 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-22 02:32:32,094 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:32,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:32,095 INFO L85 PathProgramCache]: Analyzing trace with hash 354410300, now seen corresponding path program 1 times [2022-11-22 02:32:32,095 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:32,095 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [149678281] [2022-11-22 02:32:32,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:32,095 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:32,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:32,167 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:32,168 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:32,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [149678281] [2022-11-22 02:32:32,168 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [149678281] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:32,168 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:32,168 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:32:32,169 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [195049060] [2022-11-22 02:32:32,169 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:32,169 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 02:32:32,170 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:32,170 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 02:32:32,170 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:32:32,171 INFO L87 Difference]: Start difference. First operand 30 states and 35 transitions. Second operand has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:32,220 INFO L93 Difference]: Finished difference Result 30 states and 36 transitions. [2022-11-22 02:32:32,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 02:32:32,221 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-22 02:32:32,221 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:32,222 INFO L225 Difference]: With dead ends: 30 [2022-11-22 02:32:32,222 INFO L226 Difference]: Without dead ends: 30 [2022-11-22 02:32:32,222 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:32:32,223 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 37 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 21 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:32,224 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 21 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:32:32,225 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2022-11-22 02:32:32,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 27. [2022-11-22 02:32:32,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 20 states have (on average 1.6) internal successors, (32), 26 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 32 transitions. [2022-11-22 02:32:32,229 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 32 transitions. Word has length 8 [2022-11-22 02:32:32,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:32,230 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 32 transitions. [2022-11-22 02:32:32,230 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,230 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 32 transitions. [2022-11-22 02:32:32,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-22 02:32:32,231 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:32,231 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:32,231 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-22 02:32:32,232 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:32,232 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:32,233 INFO L85 PathProgramCache]: Analyzing trace with hash 354410301, now seen corresponding path program 1 times [2022-11-22 02:32:32,233 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:32,233 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [438455393] [2022-11-22 02:32:32,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:32,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:32,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:32,393 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:32,393 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:32,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [438455393] [2022-11-22 02:32:32,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [438455393] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:32,394 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:32,394 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:32:32,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [209452251] [2022-11-22 02:32:32,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:32,395 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 02:32:32,395 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:32,395 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 02:32:32,395 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:32:32,396 INFO L87 Difference]: Start difference. First operand 27 states and 32 transitions. Second operand has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:32,465 INFO L93 Difference]: Finished difference Result 43 states and 51 transitions. [2022-11-22 02:32:32,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 02:32:32,466 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-22 02:32:32,466 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:32,467 INFO L225 Difference]: With dead ends: 43 [2022-11-22 02:32:32,467 INFO L226 Difference]: Without dead ends: 43 [2022-11-22 02:32:32,467 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-22 02:32:32,468 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 91 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 31 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:32,469 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 31 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:32:32,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-22 02:32:32,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 33. [2022-11-22 02:32:32,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 26 states have (on average 1.6153846153846154) internal successors, (42), 32 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 42 transitions. [2022-11-22 02:32:32,481 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 42 transitions. Word has length 8 [2022-11-22 02:32:32,481 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:32,481 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 42 transitions. [2022-11-22 02:32:32,481 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,482 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 42 transitions. [2022-11-22 02:32:32,482 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-22 02:32:32,482 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:32,483 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:32,483 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-22 02:32:32,483 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:32,483 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:32,484 INFO L85 PathProgramCache]: Analyzing trace with hash 1285859555, now seen corresponding path program 1 times [2022-11-22 02:32:32,484 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:32,484 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [219974612] [2022-11-22 02:32:32,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:32,484 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:32,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:32,607 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:32,607 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:32,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [219974612] [2022-11-22 02:32:32,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [219974612] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:32,608 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:32,608 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 02:32:32,608 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [990124993] [2022-11-22 02:32:32,608 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:32,608 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 02:32:32,609 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:32,609 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 02:32:32,609 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:32:32,609 INFO L87 Difference]: Start difference. First operand 33 states and 42 transitions. Second operand has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,637 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:32,637 INFO L93 Difference]: Finished difference Result 32 states and 41 transitions. [2022-11-22 02:32:32,638 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 02:32:32,638 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-22 02:32:32,638 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:32,639 INFO L225 Difference]: With dead ends: 32 [2022-11-22 02:32:32,639 INFO L226 Difference]: Without dead ends: 29 [2022-11-22 02:32:32,639 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:32:32,640 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 21 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:32,640 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 32 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:32:32,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-22 02:32:32,642 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-22 02:32:32,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 23 states have (on average 1.608695652173913) internal successors, (37), 28 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,642 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 37 transitions. [2022-11-22 02:32:32,642 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 37 transitions. Word has length 10 [2022-11-22 02:32:32,643 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:32,643 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 37 transitions. [2022-11-22 02:32:32,643 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,643 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 37 transitions. [2022-11-22 02:32:32,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 02:32:32,644 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:32,644 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:32,644 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-11-22 02:32:32,644 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr14REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:32,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:32,645 INFO L85 PathProgramCache]: Analyzing trace with hash 1209053803, now seen corresponding path program 1 times [2022-11-22 02:32:32,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:32,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1128832992] [2022-11-22 02:32:32,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:32,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:32,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:32,684 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:32,684 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:32,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1128832992] [2022-11-22 02:32:32,685 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1128832992] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:32,685 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:32,685 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:32:32,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1576964388] [2022-11-22 02:32:32,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:32,686 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 02:32:32,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:32,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 02:32:32,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 02:32:32,686 INFO L87 Difference]: Start difference. First operand 29 states and 37 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:32,724 INFO L93 Difference]: Finished difference Result 29 states and 36 transitions. [2022-11-22 02:32:32,725 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 02:32:32,725 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 02:32:32,725 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:32,725 INFO L225 Difference]: With dead ends: 29 [2022-11-22 02:32:32,725 INFO L226 Difference]: Without dead ends: 29 [2022-11-22 02:32:32,726 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:32:32,726 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 25 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:32,727 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 14 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:32:32,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-22 02:32:32,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 28. [2022-11-22 02:32:32,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 23 states have (on average 1.5217391304347827) internal successors, (35), 27 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,731 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 35 transitions. [2022-11-22 02:32:32,731 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 35 transitions. Word has length 11 [2022-11-22 02:32:32,731 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:32,732 INFO L495 AbstractCegarLoop]: Abstraction has 28 states and 35 transitions. [2022-11-22 02:32:32,732 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:32,732 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 35 transitions. [2022-11-22 02:32:32,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 02:32:32,733 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:32,733 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:32,734 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-22 02:32:32,734 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:32,734 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:32,735 INFO L85 PathProgramCache]: Analyzing trace with hash 1209053804, now seen corresponding path program 1 times [2022-11-22 02:32:32,735 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:32,735 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [265018925] [2022-11-22 02:32:32,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:32,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:32,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:32,887 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:32,887 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:32,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [265018925] [2022-11-22 02:32:32,888 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [265018925] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:32,888 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:32,888 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 02:32:32,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [459165209] [2022-11-22 02:32:32,888 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:32,889 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-22 02:32:32,889 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:32,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-22 02:32:32,889 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-22 02:32:32,890 INFO L87 Difference]: Start difference. First operand 28 states and 35 transitions. Second operand has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:33,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:33,003 INFO L93 Difference]: Finished difference Result 50 states and 61 transitions. [2022-11-22 02:32:33,003 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-22 02:32:33,004 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 02:32:33,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:33,004 INFO L225 Difference]: With dead ends: 50 [2022-11-22 02:32:33,004 INFO L226 Difference]: Without dead ends: 50 [2022-11-22 02:32:33,006 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2022-11-22 02:32:33,007 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 79 mSDsluCounter, 11 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:33,007 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 17 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:32:33,008 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-22 02:32:33,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 33. [2022-11-22 02:32:33,010 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 28 states have (on average 1.4642857142857142) internal successors, (41), 32 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:33,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 41 transitions. [2022-11-22 02:32:33,014 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 41 transitions. Word has length 11 [2022-11-22 02:32:33,014 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:33,015 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 41 transitions. [2022-11-22 02:32:33,015 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:33,015 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 41 transitions. [2022-11-22 02:32:33,016 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 02:32:33,016 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:33,016 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:33,016 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-22 02:32:33,017 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:33,019 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:33,019 INFO L85 PathProgramCache]: Analyzing trace with hash 1209062877, now seen corresponding path program 1 times [2022-11-22 02:32:33,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:33,019 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1243785903] [2022-11-22 02:32:33,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:33,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:33,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:33,050 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:33,051 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:33,051 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1243785903] [2022-11-22 02:32:33,051 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1243785903] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:33,051 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:33,052 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 02:32:33,052 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [27450303] [2022-11-22 02:32:33,052 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:33,052 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 02:32:33,053 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:33,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 02:32:33,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:32:33,053 INFO L87 Difference]: Start difference. First operand 33 states and 41 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:33,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:33,073 INFO L93 Difference]: Finished difference Result 35 states and 43 transitions. [2022-11-22 02:32:33,073 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 02:32:33,073 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 02:32:33,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:33,074 INFO L225 Difference]: With dead ends: 35 [2022-11-22 02:32:33,074 INFO L226 Difference]: Without dead ends: 35 [2022-11-22 02:32:33,074 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 02:32:33,075 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 0 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:33,075 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 29 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:32:33,077 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-11-22 02:32:33,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 35. [2022-11-22 02:32:33,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 30 states have (on average 1.4333333333333333) internal successors, (43), 34 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:33,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 43 transitions. [2022-11-22 02:32:33,083 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 43 transitions. Word has length 11 [2022-11-22 02:32:33,083 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:33,083 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 43 transitions. [2022-11-22 02:32:33,084 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:33,084 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 43 transitions. [2022-11-22 02:32:33,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-22 02:32:33,085 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:33,085 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:33,086 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-11-22 02:32:33,086 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:33,086 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:33,086 INFO L85 PathProgramCache]: Analyzing trace with hash -2035392994, now seen corresponding path program 1 times [2022-11-22 02:32:33,087 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:33,087 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [667711290] [2022-11-22 02:32:33,087 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:33,087 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:33,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:33,455 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:33,455 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:33,455 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [667711290] [2022-11-22 02:32:33,456 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [667711290] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:33,456 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:33,456 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-22 02:32:33,456 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [72358573] [2022-11-22 02:32:33,456 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:33,457 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-22 02:32:33,457 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:33,458 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-22 02:32:33,458 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2022-11-22 02:32:33,458 INFO L87 Difference]: Start difference. First operand 35 states and 43 transitions. Second operand has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:33,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:33,878 INFO L93 Difference]: Finished difference Result 81 states and 97 transitions. [2022-11-22 02:32:33,879 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-22 02:32:33,879 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-22 02:32:33,879 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:33,879 INFO L225 Difference]: With dead ends: 81 [2022-11-22 02:32:33,880 INFO L226 Difference]: Without dead ends: 81 [2022-11-22 02:32:33,880 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=149, Invalid=313, Unknown=0, NotChecked=0, Total=462 [2022-11-22 02:32:33,880 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 129 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:33,881 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 84 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 02:32:33,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-11-22 02:32:33,882 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 46. [2022-11-22 02:32:33,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 41 states have (on average 1.3902439024390243) internal successors, (57), 45 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:33,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 57 transitions. [2022-11-22 02:32:33,883 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 57 transitions. Word has length 13 [2022-11-22 02:32:33,883 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:33,883 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 57 transitions. [2022-11-22 02:32:33,883 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:33,883 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 57 transitions. [2022-11-22 02:32:33,883 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-22 02:32:33,884 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:33,884 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:33,884 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-11-22 02:32:33,884 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:33,884 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:33,884 INFO L85 PathProgramCache]: Analyzing trace with hash -2026746548, now seen corresponding path program 1 times [2022-11-22 02:32:33,885 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:33,885 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [45799612] [2022-11-22 02:32:33,885 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:33,885 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:33,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:33,954 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:33,956 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:33,957 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [45799612] [2022-11-22 02:32:33,957 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [45799612] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:33,957 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:33,957 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-22 02:32:33,957 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [640624028] [2022-11-22 02:32:33,957 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:33,958 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 02:32:33,958 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:33,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 02:32:33,958 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 02:32:33,959 INFO L87 Difference]: Start difference. First operand 46 states and 57 transitions. Second operand has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:34,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:34,002 INFO L93 Difference]: Finished difference Result 51 states and 61 transitions. [2022-11-22 02:32:34,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 02:32:34,002 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-22 02:32:34,002 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:34,003 INFO L225 Difference]: With dead ends: 51 [2022-11-22 02:32:34,003 INFO L226 Difference]: Without dead ends: 48 [2022-11-22 02:32:34,003 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-22 02:32:34,004 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 10 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:34,004 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 26 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 02:32:34,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2022-11-22 02:32:34,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 47. [2022-11-22 02:32:34,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 42 states have (on average 1.3095238095238095) internal successors, (55), 46 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:34,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 55 transitions. [2022-11-22 02:32:34,006 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 55 transitions. Word has length 13 [2022-11-22 02:32:34,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:34,008 INFO L495 AbstractCegarLoop]: Abstraction has 47 states and 55 transitions. [2022-11-22 02:32:34,008 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:34,009 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 55 transitions. [2022-11-22 02:32:34,012 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-22 02:32:34,012 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:34,013 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:34,013 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-11-22 02:32:34,013 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:34,013 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:34,014 INFO L85 PathProgramCache]: Analyzing trace with hash -1802581683, now seen corresponding path program 1 times [2022-11-22 02:32:34,014 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:34,014 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1171495362] [2022-11-22 02:32:34,014 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:34,015 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:34,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:34,259 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:32:34,260 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:34,260 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1171495362] [2022-11-22 02:32:34,260 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1171495362] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:34,260 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:34,260 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-22 02:32:34,261 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1703635808] [2022-11-22 02:32:34,261 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:34,262 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-22 02:32:34,262 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:34,263 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-22 02:32:34,263 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-11-22 02:32:34,263 INFO L87 Difference]: Start difference. First operand 47 states and 55 transitions. Second operand has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:34,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:34,369 INFO L93 Difference]: Finished difference Result 43 states and 50 transitions. [2022-11-22 02:32:34,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-22 02:32:34,370 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-22 02:32:34,370 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:34,371 INFO L225 Difference]: With dead ends: 43 [2022-11-22 02:32:34,371 INFO L226 Difference]: Without dead ends: 37 [2022-11-22 02:32:34,371 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-22 02:32:34,371 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 10 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:34,372 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 78 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:32:34,372 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-22 02:32:34,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 36. [2022-11-22 02:32:34,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 31 states have (on average 1.3548387096774193) internal successors, (42), 35 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:34,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 42 transitions. [2022-11-22 02:32:34,373 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 42 transitions. Word has length 15 [2022-11-22 02:32:34,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:34,373 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 42 transitions. [2022-11-22 02:32:34,373 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:34,374 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 42 transitions. [2022-11-22 02:32:34,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-22 02:32:34,374 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:34,374 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:34,374 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-11-22 02:32:34,374 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:34,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:34,375 INFO L85 PathProgramCache]: Analyzing trace with hash 204836708, now seen corresponding path program 1 times [2022-11-22 02:32:34,375 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:34,375 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1756064898] [2022-11-22 02:32:34,375 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:34,375 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:34,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:34,622 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:34,623 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:34,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1756064898] [2022-11-22 02:32:34,623 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1756064898] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:32:34,623 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 02:32:34,623 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-22 02:32:34,624 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [388720658] [2022-11-22 02:32:34,624 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:32:34,624 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-22 02:32:34,627 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:34,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-22 02:32:34,628 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-11-22 02:32:34,628 INFO L87 Difference]: Start difference. First operand 36 states and 42 transitions. Second operand has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:34,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:34,764 INFO L93 Difference]: Finished difference Result 44 states and 50 transitions. [2022-11-22 02:32:34,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-22 02:32:34,765 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-22 02:32:34,765 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:34,765 INFO L225 Difference]: With dead ends: 44 [2022-11-22 02:32:34,766 INFO L226 Difference]: Without dead ends: 38 [2022-11-22 02:32:34,766 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-22 02:32:34,766 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 40 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:34,767 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 74 Invalid, 81 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:32:34,767 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-22 02:32:34,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 37. [2022-11-22 02:32:34,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 32 states have (on average 1.34375) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:34,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-22 02:32:34,769 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 15 [2022-11-22 02:32:34,769 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:34,769 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-22 02:32:34,769 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:34,770 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-22 02:32:34,770 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-22 02:32:34,770 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:34,770 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:34,770 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-11-22 02:32:34,771 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:34,771 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:34,771 INFO L85 PathProgramCache]: Analyzing trace with hash 1117547254, now seen corresponding path program 1 times [2022-11-22 02:32:34,771 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:34,771 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1342172608] [2022-11-22 02:32:34,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:34,772 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:34,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:35,035 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:35,035 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:35,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1342172608] [2022-11-22 02:32:35,035 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1342172608] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:32:35,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1621462581] [2022-11-22 02:32:35,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:35,036 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:32:35,036 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:32:35,037 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:32:35,067 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-22 02:32:35,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:35,140 INFO L263 TraceCheckSpWp]: Trace formula consists of 162 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-22 02:32:35,141 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:32:35,241 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:35,241 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:32:35,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:32:35,375 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:35,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1621462581] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:32:35,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1462354364] [2022-11-22 02:32:35,378 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:32:35,378 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:32:35,379 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:32:35,379 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:32:35,379 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:32:35,426 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:32:35,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:32:35,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:35,528 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:35,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:35,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:32:35,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:35,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:35,759 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:35,831 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:32:35,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:32:36,296 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:32:39,627 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2087#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:32:39,627 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:32:39,627 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:32:39,627 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 17 [2022-11-22 02:32:39,627 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1313384190] [2022-11-22 02:32:39,627 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:32:39,628 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-22 02:32:39,628 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:39,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-22 02:32:39,629 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=140, Invalid=852, Unknown=0, NotChecked=0, Total=992 [2022-11-22 02:32:39,629 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:39,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:39,910 INFO L93 Difference]: Finished difference Result 54 states and 59 transitions. [2022-11-22 02:32:39,911 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-22 02:32:39,911 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-22 02:32:39,911 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:39,911 INFO L225 Difference]: With dead ends: 54 [2022-11-22 02:32:39,912 INFO L226 Difference]: Without dead ends: 50 [2022-11-22 02:32:39,912 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 24 SyntacticMatches, 2 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 433 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=201, Invalid=1131, Unknown=0, NotChecked=0, Total=1332 [2022-11-22 02:32:39,913 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 239 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 35 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:39,913 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [239 Valid, 35 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:32:39,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-22 02:32:39,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 33. [2022-11-22 02:32:39,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 30 states have (on average 1.2666666666666666) internal successors, (38), 32 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:39,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 38 transitions. [2022-11-22 02:32:39,917 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 38 transitions. Word has length 17 [2022-11-22 02:32:39,917 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:39,917 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 38 transitions. [2022-11-22 02:32:39,917 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:39,918 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 38 transitions. [2022-11-22 02:32:39,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-22 02:32:39,921 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:39,921 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:39,931 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-22 02:32:40,121 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:32:40,122 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:40,122 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:40,122 INFO L85 PathProgramCache]: Analyzing trace with hash 221052965, now seen corresponding path program 1 times [2022-11-22 02:32:40,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:40,122 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1820369801] [2022-11-22 02:32:40,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:40,123 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:40,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:40,326 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:40,327 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:40,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1820369801] [2022-11-22 02:32:40,327 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1820369801] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:32:40,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [632280389] [2022-11-22 02:32:40,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:40,328 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:32:40,328 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:32:40,329 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:32:40,347 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-22 02:32:40,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:40,426 INFO L263 TraceCheckSpWp]: Trace formula consists of 165 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-22 02:32:40,428 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:32:40,537 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:40,538 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:32:40,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:32:40,683 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:40,684 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [632280389] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:32:40,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [715079755] [2022-11-22 02:32:40,690 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:32:40,690 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:32:40,691 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:32:40,691 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:32:40,691 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:32:40,730 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:32:40,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:32:40,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:32:40,849 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:40,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:40,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:32:41,042 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 02:32:41,043 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-22 02:32:41,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:41,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:41,251 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-22 02:32:41,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 177 treesize of output 181 [2022-11-22 02:32:41,456 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-22 02:32:41,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 328 treesize of output 343 [2022-11-22 02:32:43,619 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:32:47,600 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2323#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:32:47,600 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:32:47,600 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:32:47,601 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 15 [2022-11-22 02:32:47,601 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [714466445] [2022-11-22 02:32:47,601 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:32:47,601 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-22 02:32:47,602 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:47,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-22 02:32:47,603 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=146, Invalid=910, Unknown=0, NotChecked=0, Total=1056 [2022-11-22 02:32:47,603 INFO L87 Difference]: Start difference. First operand 33 states and 38 transitions. Second operand has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:47,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:47,817 INFO L93 Difference]: Finished difference Result 62 states and 72 transitions. [2022-11-22 02:32:47,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-22 02:32:47,820 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-22 02:32:47,820 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:47,821 INFO L225 Difference]: With dead ends: 62 [2022-11-22 02:32:47,821 INFO L226 Difference]: Without dead ends: 62 [2022-11-22 02:32:47,822 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 28 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 416 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=202, Invalid=1204, Unknown=0, NotChecked=0, Total=1406 [2022-11-22 02:32:47,822 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 296 mSDsluCounter, 31 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 296 SdHoareTripleChecker+Valid, 38 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:47,822 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [296 Valid, 38 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 02:32:47,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-22 02:32:47,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 43. [2022-11-22 02:32:47,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 40 states have (on average 1.3) internal successors, (52), 42 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:47,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 52 transitions. [2022-11-22 02:32:47,824 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 52 transitions. Word has length 19 [2022-11-22 02:32:47,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:47,825 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 52 transitions. [2022-11-22 02:32:47,825 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:47,825 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 52 transitions. [2022-11-22 02:32:47,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-22 02:32:47,825 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:47,825 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:47,830 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-22 02:32:48,026 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:32:48,026 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:48,027 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:48,027 INFO L85 PathProgramCache]: Analyzing trace with hash -1734844397, now seen corresponding path program 1 times [2022-11-22 02:32:48,027 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:48,027 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1872935249] [2022-11-22 02:32:48,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:48,027 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:48,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:48,277 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:48,277 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:48,278 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1872935249] [2022-11-22 02:32:48,278 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1872935249] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:32:48,278 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1861170273] [2022-11-22 02:32:48,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:48,278 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:32:48,278 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:32:48,279 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:32:48,319 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-22 02:32:48,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:48,393 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 23 conjunts are in the unsatisfiable core [2022-11-22 02:32:48,394 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:32:48,523 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:48,524 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:32:48,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:32:48,697 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:48,697 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1861170273] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:32:48,697 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [956117351] [2022-11-22 02:32:48,699 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:32:48,699 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:32:48,699 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:32:48,699 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:32:48,699 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:32:48,725 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:32:48,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:32:48,763 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:32:48,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:48,857 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:48,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:32:48,960 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 02:32:48,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-22 02:32:49,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:49,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:49,161 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-22 02:32:49,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 177 treesize of output 181 [2022-11-22 02:32:49,358 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-22 02:32:49,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 328 treesize of output 343 [2022-11-22 02:32:50,778 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:32:54,302 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2588#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:32:54,303 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:32:54,303 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:32:54,303 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 18 [2022-11-22 02:32:54,303 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [314634601] [2022-11-22 02:32:54,303 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:32:54,304 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-22 02:32:54,304 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:32:54,304 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-22 02:32:54,305 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=139, Invalid=983, Unknown=0, NotChecked=0, Total=1122 [2022-11-22 02:32:54,305 INFO L87 Difference]: Start difference. First operand 43 states and 52 transitions. Second operand has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:54,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:32:54,678 INFO L93 Difference]: Finished difference Result 58 states and 66 transitions. [2022-11-22 02:32:54,679 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-22 02:32:54,679 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-22 02:32:54,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:32:54,679 INFO L225 Difference]: With dead ends: 58 [2022-11-22 02:32:54,679 INFO L226 Difference]: Without dead ends: 58 [2022-11-22 02:32:54,680 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 31 SyntacticMatches, 2 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 499 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=266, Invalid=1540, Unknown=0, NotChecked=0, Total=1806 [2022-11-22 02:32:54,681 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 221 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 221 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:32:54,681 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [221 Valid, 46 Invalid, 272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 02:32:54,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-11-22 02:32:54,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 46. [2022-11-22 02:32:54,683 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 43 states have (on average 1.2790697674418605) internal successors, (55), 45 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:54,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 55 transitions. [2022-11-22 02:32:54,683 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 55 transitions. Word has length 20 [2022-11-22 02:32:54,683 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:32:54,683 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 55 transitions. [2022-11-22 02:32:54,683 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:32:54,683 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 55 transitions. [2022-11-22 02:32:54,684 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-22 02:32:54,684 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:32:54,684 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:32:54,696 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-22 02:32:54,889 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:32:54,890 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:32:54,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:32:54,890 INFO L85 PathProgramCache]: Analyzing trace with hash -738116091, now seen corresponding path program 2 times [2022-11-22 02:32:54,890 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:32:54,891 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1691227972] [2022-11-22 02:32:54,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:32:54,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:32:54,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:32:55,291 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:55,291 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:32:55,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1691227972] [2022-11-22 02:32:55,291 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1691227972] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:32:55,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [240588793] [2022-11-22 02:32:55,291 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:32:55,291 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:32:55,292 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:32:55,293 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:32:55,319 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-22 02:32:55,489 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 02:32:55,489 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:32:55,490 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-22 02:32:55,493 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:32:55,501 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:32:55,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:55,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:32:56,075 INFO L321 Elim1Store]: treesize reduction 24, result has 35.1 percent of original size [2022-11-22 02:32:56,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 48 treesize of output 33 [2022-11-22 02:32:56,101 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:56,101 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:32:56,394 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (|ULTIMATE.start_substring_~pt~0#1.offset| Int) (v_ArrVal_286 (Array Int Int))) (let ((.cse1 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_286))) (let ((.cse0 (select (select .cse1 |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|))) (or (= .cse0 0) (not (= (select (select .cse1 |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) .cse0)))))) is different from false [2022-11-22 02:32:56,425 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:32:56,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 64 treesize of output 42 [2022-11-22 02:32:56,447 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:32:56,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 111 treesize of output 116 [2022-11-22 02:32:56,477 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:32:56,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 64 [2022-11-22 02:32:56,886 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:32:56,887 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [240588793] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:32:56,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1652011811] [2022-11-22 02:32:56,889 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:32:56,889 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:32:56,889 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:32:56,889 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:32:56,890 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:32:56,928 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:32:56,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:32:56,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:57,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:57,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:57,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:32:57,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:57,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:57,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:32:57,247 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:32:57,248 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:32:57,512 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:33:00,339 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2882#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:33:00,339 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:33:00,339 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:33:00,339 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 13] total 31 [2022-11-22 02:33:00,339 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1294546438] [2022-11-22 02:33:00,340 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:33:00,340 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-22 02:33:00,340 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:33:00,340 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-22 02:33:00,341 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=178, Invalid=1805, Unknown=1, NotChecked=86, Total=2070 [2022-11-22 02:33:00,341 INFO L87 Difference]: Start difference. First operand 46 states and 55 transitions. Second operand has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:10,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:33:10,547 INFO L93 Difference]: Finished difference Result 122 states and 136 transitions. [2022-11-22 02:33:10,547 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-11-22 02:33:10,547 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-22 02:33:10,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:33:10,548 INFO L225 Difference]: With dead ends: 122 [2022-11-22 02:33:10,548 INFO L226 Difference]: Without dead ends: 116 [2022-11-22 02:33:10,550 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 29 SyntacticMatches, 4 SemanticMatches, 70 ConstructedPredicates, 1 IntricatePredicates, 3 DeprecatedPredicates, 1528 ImplicationChecksByTransitivity, 13.2s TimeCoverageRelationStatistics Valid=440, Invalid=4533, Unknown=1, NotChecked=138, Total=5112 [2022-11-22 02:33:10,550 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 134 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 522 mSolverCounterSat, 11 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 589 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 522 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 55 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 02:33:10,551 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 95 Invalid, 589 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 522 Invalid, 1 Unknown, 55 Unchecked, 0.5s Time] [2022-11-22 02:33:10,551 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2022-11-22 02:33:10,553 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 90. [2022-11-22 02:33:10,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 87 states have (on average 1.2183908045977012) internal successors, (106), 89 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:10,554 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 106 transitions. [2022-11-22 02:33:10,554 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 106 transitions. Word has length 22 [2022-11-22 02:33:10,554 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:33:10,554 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 106 transitions. [2022-11-22 02:33:10,554 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:10,555 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 106 transitions. [2022-11-22 02:33:10,555 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-22 02:33:10,555 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:33:10,555 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:33:10,567 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-22 02:33:10,760 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-11-22 02:33:10,761 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:33:10,761 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:33:10,762 INFO L85 PathProgramCache]: Analyzing trace with hash 1722857087, now seen corresponding path program 1 times [2022-11-22 02:33:10,762 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:33:10,762 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [556799884] [2022-11-22 02:33:10,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:33:10,763 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:33:10,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:33:11,001 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:33:11,002 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:33:11,002 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [556799884] [2022-11-22 02:33:11,002 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [556799884] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:33:11,002 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1297041901] [2022-11-22 02:33:11,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:33:11,002 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:33:11,002 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:33:11,004 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:33:11,023 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-22 02:33:11,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:33:11,106 INFO L263 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-22 02:33:11,107 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:33:11,171 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 02:33:11,172 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:33:11,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 6 [2022-11-22 02:33:11,269 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 02:33:11,270 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1297041901] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:33:11,270 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1125658674] [2022-11-22 02:33:11,271 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:33:11,272 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:33:11,272 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:33:11,272 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:33:11,272 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:33:11,306 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:33:11,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:33:11,349 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:33:11,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:11,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:11,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:11,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:33:11,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:11,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:11,698 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:33:11,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:33:12,083 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:33:15,881 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1125658674] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 02:33:15,881 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:33:15,881 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [7, 5, 5] total 28 [2022-11-22 02:33:15,884 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [459856900] [2022-11-22 02:33:15,885 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 02:33:15,885 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-22 02:33:15,886 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:33:15,886 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-22 02:33:15,886 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=664, Unknown=0, NotChecked=0, Total=812 [2022-11-22 02:33:15,887 INFO L87 Difference]: Start difference. First operand 90 states and 106 transitions. Second operand has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:19,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:33:19,629 INFO L93 Difference]: Finished difference Result 94 states and 108 transitions. [2022-11-22 02:33:19,629 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-22 02:33:19,629 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-22 02:33:19,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:33:19,630 INFO L225 Difference]: With dead ends: 94 [2022-11-22 02:33:19,630 INFO L226 Difference]: Without dead ends: 94 [2022-11-22 02:33:19,631 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 49 SyntacticMatches, 1 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 226 ImplicationChecksByTransitivity, 7.4s TimeCoverageRelationStatistics Valid=280, Invalid=1126, Unknown=0, NotChecked=0, Total=1406 [2022-11-22 02:33:19,631 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 76 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:33:19,632 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 3 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:33:19,632 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-22 02:33:19,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 90. [2022-11-22 02:33:19,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 87 states have (on average 1.1954022988505748) internal successors, (104), 89 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:19,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 104 transitions. [2022-11-22 02:33:19,634 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 104 transitions. Word has length 24 [2022-11-22 02:33:19,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:33:19,635 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 104 transitions. [2022-11-22 02:33:19,635 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:19,635 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 104 transitions. [2022-11-22 02:33:19,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-22 02:33:19,636 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:33:19,636 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:33:19,643 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-22 02:33:19,841 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-11-22 02:33:19,841 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:33:19,842 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:33:19,842 INFO L85 PathProgramCache]: Analyzing trace with hash 1241317677, now seen corresponding path program 3 times [2022-11-22 02:33:19,842 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:33:19,842 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [858952649] [2022-11-22 02:33:19,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:33:19,842 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:33:19,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:33:20,167 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:20,167 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:33:20,167 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [858952649] [2022-11-22 02:33:20,167 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [858952649] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:33:20,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [197843707] [2022-11-22 02:33:20,168 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:33:20,168 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:33:20,168 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:33:20,169 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:33:20,195 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-22 02:33:20,312 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:33:20,313 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:33:20,314 INFO L263 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 26 conjunts are in the unsatisfiable core [2022-11-22 02:33:20,316 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:33:20,330 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:33:20,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:33:20,474 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:20,474 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:33:20,761 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:20,761 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [197843707] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:33:20,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [414786565] [2022-11-22 02:33:20,763 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:33:20,763 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:33:20,763 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:33:20,763 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:33:20,764 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:33:20,803 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:33:20,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:33:20,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:33:20,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:20,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:20,991 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:21,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:33:21,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:21,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:21,175 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:33:21,176 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:33:21,382 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:33:24,351 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3705#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:33:24,351 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:33:24,351 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:33:24,351 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 23 [2022-11-22 02:33:24,352 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1633639748] [2022-11-22 02:33:24,352 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:33:24,352 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-22 02:33:24,352 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:33:24,353 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-22 02:33:24,353 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=1216, Unknown=0, NotChecked=0, Total=1406 [2022-11-22 02:33:24,353 INFO L87 Difference]: Start difference. First operand 90 states and 104 transitions. Second operand has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:24,848 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:33:24,848 INFO L93 Difference]: Finished difference Result 132 states and 150 transitions. [2022-11-22 02:33:24,848 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-22 02:33:24,848 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-11-22 02:33:24,849 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:33:24,850 INFO L225 Difference]: With dead ends: 132 [2022-11-22 02:33:24,850 INFO L226 Difference]: Without dead ends: 132 [2022-11-22 02:33:24,851 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 540 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=309, Invalid=1671, Unknown=0, NotChecked=0, Total=1980 [2022-11-22 02:33:24,852 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 298 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 395 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 298 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 401 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 395 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:33:24,852 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [298 Valid, 104 Invalid, 401 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 395 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:33:24,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2022-11-22 02:33:24,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 97. [2022-11-22 02:33:24,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 94 states have (on average 1.2127659574468086) internal successors, (114), 96 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:24,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 114 transitions. [2022-11-22 02:33:24,856 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 114 transitions. Word has length 26 [2022-11-22 02:33:24,857 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:33:24,857 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 114 transitions. [2022-11-22 02:33:24,858 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:24,858 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 114 transitions. [2022-11-22 02:33:24,858 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-22 02:33:24,858 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:33:24,859 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:33:24,872 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-22 02:33:25,059 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-11-22 02:33:25,059 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:33:25,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:33:25,060 INFO L85 PathProgramCache]: Analyzing trace with hash -1667724320, now seen corresponding path program 2 times [2022-11-22 02:33:25,060 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:33:25,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [676178318] [2022-11-22 02:33:25,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:33:25,060 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:33:25,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:33:25,534 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:33:25,534 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:33:25,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [676178318] [2022-11-22 02:33:25,534 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [676178318] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:33:25,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2030148301] [2022-11-22 02:33:25,534 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:33:25,535 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:33:25,535 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:33:25,536 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:33:25,559 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-22 02:33:25,653 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 02:33:25,653 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:33:25,654 INFO L263 TraceCheckSpWp]: Trace formula consists of 213 conjuncts, 32 conjunts are in the unsatisfiable core [2022-11-22 02:33:25,657 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:33:25,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:25,842 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:33:25,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:33:26,020 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 02:33:26,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 02:33:26,042 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:33:26,042 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:33:26,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-22 02:33:26,305 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:33:26,305 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2030148301] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:33:26,306 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [699317142] [2022-11-22 02:33:26,307 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:33:26,307 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:33:26,307 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:33:26,307 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:33:26,308 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:33:26,340 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:33:26,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:33:26,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:33:26,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:26,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:26,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:33:26,556 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 02:33:26,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-22 02:33:26,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:26,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:26,677 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:33:26,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:33:27,163 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:33:30,928 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4147#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:33:30,928 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:33:30,928 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:33:30,928 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 22 [2022-11-22 02:33:30,928 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1612622614] [2022-11-22 02:33:30,928 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:33:30,928 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-22 02:33:30,929 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:33:30,929 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-22 02:33:30,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=1325, Unknown=0, NotChecked=0, Total=1482 [2022-11-22 02:33:30,930 INFO L87 Difference]: Start difference. First operand 97 states and 114 transitions. Second operand has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:31,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:33:31,346 INFO L93 Difference]: Finished difference Result 115 states and 130 transitions. [2022-11-22 02:33:31,346 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-22 02:33:31,347 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-22 02:33:31,347 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:33:31,347 INFO L225 Difference]: With dead ends: 115 [2022-11-22 02:33:31,347 INFO L226 Difference]: Without dead ends: 79 [2022-11-22 02:33:31,348 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 53 SyntacticMatches, 2 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 658 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=239, Invalid=1741, Unknown=0, NotChecked=0, Total=1980 [2022-11-22 02:33:31,348 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 82 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:33:31,348 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [82 Valid, 94 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 02:33:31,349 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-11-22 02:33:31,350 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 78. [2022-11-22 02:33:31,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 75 states have (on average 1.2133333333333334) internal successors, (91), 77 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:31,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 91 transitions. [2022-11-22 02:33:31,350 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 91 transitions. Word has length 28 [2022-11-22 02:33:31,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:33:31,351 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 91 transitions. [2022-11-22 02:33:31,351 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:31,351 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 91 transitions. [2022-11-22 02:33:31,351 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-22 02:33:31,351 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:33:31,351 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:33:31,367 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-22 02:33:31,555 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-22 02:33:31,555 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:33:31,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:33:31,556 INFO L85 PathProgramCache]: Analyzing trace with hash 427887228, now seen corresponding path program 2 times [2022-11-22 02:33:31,556 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:33:31,556 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1222497494] [2022-11-22 02:33:31,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:33:31,556 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:33:31,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:33:31,818 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 17 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:31,819 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:33:31,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1222497494] [2022-11-22 02:33:31,819 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1222497494] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:33:31,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1483892682] [2022-11-22 02:33:31,819 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:33:31,819 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:33:31,819 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:33:31,820 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:33:31,837 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-22 02:33:32,131 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 02:33:32,131 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:33:32,133 INFO L263 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-22 02:33:32,135 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:33:32,367 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:32,367 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:33:32,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-22 02:33:32,665 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:32,666 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1483892682] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:33:32,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [457066984] [2022-11-22 02:33:32,667 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:33:32,667 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:33:32,668 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:33:32,668 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:33:32,668 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:33:32,695 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:33:32,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:33:32,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:33:32,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:32,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:32,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:32,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:33:32,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:32,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:33,045 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:33:33,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:33:33,212 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:33:36,285 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4561#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:33:36,285 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:33:36,285 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:33:36,285 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 23 [2022-11-22 02:33:36,285 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2007921029] [2022-11-22 02:33:36,285 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:33:36,286 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-22 02:33:36,286 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:33:36,286 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-22 02:33:36,287 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=1313, Unknown=0, NotChecked=0, Total=1482 [2022-11-22 02:33:36,287 INFO L87 Difference]: Start difference. First operand 78 states and 91 transitions. Second operand has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:36,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:33:36,862 INFO L93 Difference]: Finished difference Result 97 states and 109 transitions. [2022-11-22 02:33:36,863 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-22 02:33:36,863 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-22 02:33:36,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:33:36,864 INFO L225 Difference]: With dead ends: 97 [2022-11-22 02:33:36,864 INFO L226 Difference]: Without dead ends: 97 [2022-11-22 02:33:36,865 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 53 SyntacticMatches, 3 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 629 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=365, Invalid=2085, Unknown=0, NotChecked=0, Total=2450 [2022-11-22 02:33:36,865 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 355 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 365 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 355 SdHoareTripleChecker+Valid, 63 SdHoareTripleChecker+Invalid, 374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 365 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:33:36,866 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [355 Valid, 63 Invalid, 374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 365 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:33:36,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-11-22 02:33:36,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 81. [2022-11-22 02:33:36,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 78 states have (on average 1.205128205128205) internal successors, (94), 80 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:36,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 94 transitions. [2022-11-22 02:33:36,869 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 94 transitions. Word has length 29 [2022-11-22 02:33:36,869 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:33:36,869 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 94 transitions. [2022-11-22 02:33:36,870 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:36,870 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 94 transitions. [2022-11-22 02:33:36,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-22 02:33:36,870 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:33:36,870 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:33:36,876 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-22 02:33:37,076 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-22 02:33:37,076 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:33:37,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:33:37,077 INFO L85 PathProgramCache]: Analyzing trace with hash 294381018, now seen corresponding path program 3 times [2022-11-22 02:33:37,077 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:33:37,077 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1569469680] [2022-11-22 02:33:37,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:33:37,078 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:33:37,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:33:37,330 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:33:37,331 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:33:37,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1569469680] [2022-11-22 02:33:37,331 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1569469680] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:33:37,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [146563521] [2022-11-22 02:33:37,331 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:33:37,331 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:33:37,331 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:33:37,332 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:33:37,359 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-22 02:33:37,465 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:33:37,465 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:33:37,468 INFO L263 TraceCheckSpWp]: Trace formula consists of 226 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-22 02:33:37,469 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:33:37,671 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:33:37,671 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:33:37,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:33:37,934 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:33:37,934 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [146563521] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:33:37,934 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1868053796] [2022-11-22 02:33:37,938 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:33:37,938 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:33:37,938 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:33:37,938 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:33:37,938 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:33:37,969 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:33:37,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:33:38,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:33:38,055 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:38,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:38,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:38,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:33:38,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:38,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:38,313 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:33:38,313 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:33:38,689 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:33:42,710 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4969#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:33:42,710 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:33:42,710 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:33:42,711 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 18 [2022-11-22 02:33:42,711 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1871788026] [2022-11-22 02:33:42,711 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:33:42,711 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-22 02:33:42,711 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:33:42,712 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-22 02:33:42,712 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=166, Invalid=1094, Unknown=0, NotChecked=0, Total=1260 [2022-11-22 02:33:42,712 INFO L87 Difference]: Start difference. First operand 81 states and 94 transitions. Second operand has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:43,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:33:43,105 INFO L93 Difference]: Finished difference Result 143 states and 162 transitions. [2022-11-22 02:33:43,105 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-22 02:33:43,106 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-11-22 02:33:43,106 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:33:43,106 INFO L225 Difference]: With dead ends: 143 [2022-11-22 02:33:43,106 INFO L226 Difference]: Without dead ends: 143 [2022-11-22 02:33:43,107 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 58 SyntacticMatches, 3 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 446 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=248, Invalid=1474, Unknown=0, NotChecked=0, Total=1722 [2022-11-22 02:33:43,107 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 269 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 287 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 269 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 293 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:33:43,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [269 Valid, 62 Invalid, 293 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 287 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 02:33:43,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2022-11-22 02:33:43,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 110. [2022-11-22 02:33:43,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 107 states have (on average 1.205607476635514) internal successors, (129), 109 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:43,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 129 transitions. [2022-11-22 02:33:43,110 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 129 transitions. Word has length 30 [2022-11-22 02:33:43,110 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:33:43,111 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 129 transitions. [2022-11-22 02:33:43,111 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:43,111 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 129 transitions. [2022-11-22 02:33:43,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-22 02:33:43,111 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:33:43,111 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:33:43,127 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-22 02:33:43,322 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-22 02:33:43,323 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:33:43,323 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:33:43,323 INFO L85 PathProgramCache]: Analyzing trace with hash -1117195730, now seen corresponding path program 4 times [2022-11-22 02:33:43,323 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:33:43,323 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [378803831] [2022-11-22 02:33:43,324 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:33:43,324 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:33:43,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:33:43,956 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 3 proven. 19 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:43,956 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:33:43,956 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [378803831] [2022-11-22 02:33:43,956 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [378803831] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:33:43,956 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [796644613] [2022-11-22 02:33:43,956 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:33:43,957 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:33:43,957 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:33:43,958 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:33:43,960 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-22 02:33:44,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:33:44,078 INFO L263 TraceCheckSpWp]: Trace formula consists of 248 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-22 02:33:44,079 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:33:44,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:44,537 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 02:33:44,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-22 02:33:44,542 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:44,543 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:33:44,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 02:33:44,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 02:33:44,886 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:44,886 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [796644613] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:33:44,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [233330334] [2022-11-22 02:33:44,888 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:33:44,888 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:33:44,888 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:33:44,889 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:33:44,889 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:33:44,935 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:33:44,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:33:44,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:33:45,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:45,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:45,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:45,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:33:45,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:45,206 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:45,249 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:33:45,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:33:45,476 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:33:50,039 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5461#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:33:50,040 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:33:50,040 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:33:50,040 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 12, 12] total 31 [2022-11-22 02:33:50,040 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1327939934] [2022-11-22 02:33:50,040 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:33:50,041 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-22 02:33:50,041 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:33:50,041 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-22 02:33:50,042 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=145, Invalid=1835, Unknown=0, NotChecked=0, Total=1980 [2022-11-22 02:33:50,042 INFO L87 Difference]: Start difference. First operand 110 states and 129 transitions. Second operand has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:53,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:33:53,508 INFO L93 Difference]: Finished difference Result 359 states and 402 transitions. [2022-11-22 02:33:53,508 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2022-11-22 02:33:53,508 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-22 02:33:53,508 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:33:53,510 INFO L225 Difference]: With dead ends: 359 [2022-11-22 02:33:53,510 INFO L226 Difference]: Without dead ends: 347 [2022-11-22 02:33:53,512 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 61 SyntacticMatches, 2 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 4 DeprecatedPredicates, 2043 ImplicationChecksByTransitivity, 7.8s TimeCoverageRelationStatistics Valid=770, Invalid=7062, Unknown=0, NotChecked=0, Total=7832 [2022-11-22 02:33:53,513 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 625 mSDsluCounter, 261 mSDsCounter, 0 mSdLazyCounter, 1096 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 625 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 1110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 1096 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-22 02:33:53,514 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [625 Valid, 275 Invalid, 1110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 1096 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-22 02:33:53,516 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 347 states. [2022-11-22 02:33:53,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 347 to 185. [2022-11-22 02:33:53,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 182 states have (on average 1.1923076923076923) internal successors, (217), 184 states have internal predecessors, (217), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:53,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 217 transitions. [2022-11-22 02:33:53,521 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 217 transitions. Word has length 31 [2022-11-22 02:33:53,521 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:33:53,521 INFO L495 AbstractCegarLoop]: Abstraction has 185 states and 217 transitions. [2022-11-22 02:33:53,521 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:53,522 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 217 transitions. [2022-11-22 02:33:53,522 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-22 02:33:53,522 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:33:53,523 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:33:53,528 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-22 02:33:53,728 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:33:53,728 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:33:53,728 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:33:53,728 INFO L85 PathProgramCache]: Analyzing trace with hash -1600115824, now seen corresponding path program 1 times [2022-11-22 02:33:53,729 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:33:53,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [498960615] [2022-11-22 02:33:53,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:33:53,729 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:33:53,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:33:54,063 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 0 proven. 19 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:54,063 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:33:54,063 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [498960615] [2022-11-22 02:33:54,063 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [498960615] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:33:54,063 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [991727745] [2022-11-22 02:33:54,063 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:33:54,064 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:33:54,064 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:33:54,068 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:33:54,095 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-22 02:33:54,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:33:54,193 INFO L263 TraceCheckSpWp]: Trace formula consists of 250 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-22 02:33:54,195 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:33:54,412 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 1 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:54,412 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:33:54,717 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:33:54,780 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 1 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:33:54,780 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [991727745] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:33:54,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [847845873] [2022-11-22 02:33:54,782 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:33:54,782 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:33:54,782 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:33:54,782 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:33:54,782 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:33:54,816 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:33:54,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:33:54,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:33:54,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:54,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:54,982 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:55,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:33:55,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:55,132 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:33:55,185 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:33:55,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:33:55,850 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:33:59,137 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6321#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:33:59,137 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:33:59,137 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:33:59,137 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 20 [2022-11-22 02:33:59,137 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1988488499] [2022-11-22 02:33:59,137 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:33:59,138 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-22 02:33:59,138 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:33:59,138 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-22 02:33:59,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=1238, Unknown=0, NotChecked=0, Total=1406 [2022-11-22 02:33:59,139 INFO L87 Difference]: Start difference. First operand 185 states and 217 transitions. Second operand has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:59,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:33:59,801 INFO L93 Difference]: Finished difference Result 211 states and 237 transitions. [2022-11-22 02:33:59,801 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-22 02:33:59,801 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-22 02:33:59,802 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:33:59,803 INFO L225 Difference]: With dead ends: 211 [2022-11-22 02:33:59,803 INFO L226 Difference]: Without dead ends: 211 [2022-11-22 02:33:59,804 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 66 SyntacticMatches, 3 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 637 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=384, Invalid=2166, Unknown=0, NotChecked=0, Total=2550 [2022-11-22 02:33:59,804 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 495 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 344 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 495 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 352 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 344 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:33:59,804 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [495 Valid, 54 Invalid, 352 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 344 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:33:59,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2022-11-22 02:33:59,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 185. [2022-11-22 02:33:59,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 182 states have (on average 1.1813186813186813) internal successors, (215), 184 states have internal predecessors, (215), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:59,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 215 transitions. [2022-11-22 02:33:59,809 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 215 transitions. Word has length 33 [2022-11-22 02:33:59,809 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:33:59,810 INFO L495 AbstractCegarLoop]: Abstraction has 185 states and 215 transitions. [2022-11-22 02:33:59,810 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:33:59,810 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 215 transitions. [2022-11-22 02:33:59,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-22 02:33:59,810 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:33:59,811 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:33:59,815 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-11-22 02:34:00,014 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:00,015 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:34:00,015 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:34:00,015 INFO L85 PathProgramCache]: Analyzing trace with hash 1925889798, now seen corresponding path program 5 times [2022-11-22 02:34:00,015 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:34:00,015 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1133563052] [2022-11-22 02:34:00,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:34:00,015 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:34:00,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:34:00,539 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:00,539 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:34:00,539 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1133563052] [2022-11-22 02:34:00,539 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1133563052] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:34:00,539 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [280736256] [2022-11-22 02:34:00,539 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:34:00,540 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:00,540 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:34:00,542 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:34:00,574 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-22 02:34:00,702 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-22 02:34:00,702 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:34:00,704 INFO L263 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-22 02:34:00,705 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:34:00,960 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:00,960 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:34:01,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-22 02:34:01,318 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:01,318 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [280736256] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:34:01,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [578526103] [2022-11-22 02:34:01,320 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:34:01,320 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:34:01,320 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:34:01,320 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:34:01,320 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:34:01,348 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:34:01,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:34:01,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:01,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:01,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:01,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:34:01,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:01,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:01,589 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:34:01,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:34:02,013 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:34:04,639 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6991#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:34:04,639 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:34:04,639 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:34:04,639 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 27 [2022-11-22 02:34:04,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1658161183] [2022-11-22 02:34:04,640 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:34:04,640 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-22 02:34:04,640 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:34:04,640 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-22 02:34:04,641 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1525, Unknown=0, NotChecked=0, Total=1722 [2022-11-22 02:34:04,641 INFO L87 Difference]: Start difference. First operand 185 states and 215 transitions. Second operand has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:05,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:34:05,465 INFO L93 Difference]: Finished difference Result 263 states and 298 transitions. [2022-11-22 02:34:05,465 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-22 02:34:05,465 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-22 02:34:05,465 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:34:05,466 INFO L225 Difference]: With dead ends: 263 [2022-11-22 02:34:05,466 INFO L226 Difference]: Without dead ends: 263 [2022-11-22 02:34:05,467 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 69 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 850 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=357, Invalid=2193, Unknown=0, NotChecked=0, Total=2550 [2022-11-22 02:34:05,468 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 396 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 585 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 396 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 597 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 585 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 02:34:05,468 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [396 Valid, 158 Invalid, 597 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 585 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-22 02:34:05,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 263 states. [2022-11-22 02:34:05,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 263 to 197. [2022-11-22 02:34:05,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 194 states have (on average 1.1958762886597938) internal successors, (232), 196 states have internal predecessors, (232), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:05,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 232 transitions. [2022-11-22 02:34:05,475 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 232 transitions. Word has length 35 [2022-11-22 02:34:05,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:34:05,475 INFO L495 AbstractCegarLoop]: Abstraction has 197 states and 232 transitions. [2022-11-22 02:34:05,476 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:05,476 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 232 transitions. [2022-11-22 02:34:05,476 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-22 02:34:05,476 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:34:05,477 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:34:05,487 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-22 02:34:05,682 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31,15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:05,683 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:34:05,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:34:05,683 INFO L85 PathProgramCache]: Analyzing trace with hash 2011222531, now seen corresponding path program 3 times [2022-11-22 02:34:05,683 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:34:05,683 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1286029811] [2022-11-22 02:34:05,683 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:34:05,683 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:34:05,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:34:06,089 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 1 proven. 35 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:06,089 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:34:06,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1286029811] [2022-11-22 02:34:06,090 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1286029811] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:34:06,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [246427313] [2022-11-22 02:34:06,090 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:34:06,090 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:06,090 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:34:06,091 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:34:06,093 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-22 02:34:06,232 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:34:06,232 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:34:06,234 INFO L263 TraceCheckSpWp]: Trace formula consists of 288 conjuncts, 41 conjunts are in the unsatisfiable core [2022-11-22 02:34:06,236 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:34:06,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:06,779 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 02:34:06,779 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-22 02:34:06,816 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 6 proven. 30 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:06,816 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:34:07,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 02:34:07,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 02:34:07,227 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 6 proven. 30 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:07,227 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [246427313] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:34:07,227 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1873949066] [2022-11-22 02:34:07,229 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:34:07,229 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:34:07,230 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:34:07,230 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:34:07,230 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:34:07,253 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:34:07,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:34:07,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:34:07,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:07,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:07,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:07,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:34:07,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:07,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:07,600 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:34:07,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:34:07,836 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:34:11,196 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7736#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:34:11,197 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:34:11,197 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:34:11,197 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 14, 14] total 31 [2022-11-22 02:34:11,197 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [463342575] [2022-11-22 02:34:11,197 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:34:11,197 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-22 02:34:11,198 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:34:11,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-22 02:34:11,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=1832, Unknown=0, NotChecked=0, Total=1980 [2022-11-22 02:34:11,199 INFO L87 Difference]: Start difference. First operand 197 states and 232 transitions. Second operand has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:16,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:34:16,484 INFO L93 Difference]: Finished difference Result 550 states and 613 transitions. [2022-11-22 02:34:16,485 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-11-22 02:34:16,485 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-22 02:34:16,485 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:34:16,487 INFO L225 Difference]: With dead ends: 550 [2022-11-22 02:34:16,487 INFO L226 Difference]: Without dead ends: 540 [2022-11-22 02:34:16,490 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 78 SyntacticMatches, 2 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 5 DeprecatedPredicates, 2981 ImplicationChecksByTransitivity, 7.4s TimeCoverageRelationStatistics Valid=1085, Invalid=9835, Unknown=0, NotChecked=0, Total=10920 [2022-11-22 02:34:16,491 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 739 mSDsluCounter, 568 mSDsCounter, 0 mSdLazyCounter, 2389 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 739 SdHoareTripleChecker+Valid, 618 SdHoareTripleChecker+Invalid, 2396 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 2389 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:34:16,491 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [739 Valid, 618 Invalid, 2396 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 2389 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-11-22 02:34:16,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 540 states. [2022-11-22 02:34:16,499 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 540 to 264. [2022-11-22 02:34:16,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 261 states have (on average 1.1915708812260537) internal successors, (311), 263 states have internal predecessors, (311), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:16,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 311 transitions. [2022-11-22 02:34:16,501 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 311 transitions. Word has length 38 [2022-11-22 02:34:16,501 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:34:16,501 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 311 transitions. [2022-11-22 02:34:16,501 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:16,501 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 311 transitions. [2022-11-22 02:34:16,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-22 02:34:16,502 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:34:16,502 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:34:16,514 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-11-22 02:34:16,709 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:16,709 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:34:16,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:34:16,710 INFO L85 PathProgramCache]: Analyzing trace with hash 202916299, now seen corresponding path program 4 times [2022-11-22 02:34:16,710 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:34:16,710 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1935316612] [2022-11-22 02:34:16,710 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:34:16,710 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:34:16,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:34:18,251 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:34:18,251 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:34:18,252 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1935316612] [2022-11-22 02:34:18,252 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1935316612] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:34:18,252 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2032877140] [2022-11-22 02:34:18,252 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:34:18,252 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:18,252 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:34:18,253 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:34:18,256 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-22 02:34:18,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:34:18,379 INFO L263 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-22 02:34:18,381 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:34:18,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:34:18,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:18,706 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:34:18,926 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:34:18,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 10 [2022-11-22 02:34:18,965 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:34:18,966 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:34:19,111 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:34:19,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:34:19,119 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:34:19,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:34:19,129 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 02:34:19,404 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:34:19,405 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2032877140] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:34:19,405 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [883892990] [2022-11-22 02:34:19,409 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:34:19,410 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:34:19,411 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:34:19,411 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:34:19,411 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:34:19,439 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:34:19,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:34:19,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:34:19,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:19,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:19,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:19,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:34:19,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:19,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:19,786 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:34:19,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:34:20,031 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:34:24,337 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8944#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:34:24,337 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:34:24,337 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:34:24,338 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 11] total 30 [2022-11-22 02:34:24,338 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1183770979] [2022-11-22 02:34:24,338 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:34:24,338 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-22 02:34:24,338 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:34:24,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-22 02:34:24,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=1994, Unknown=0, NotChecked=0, Total=2162 [2022-11-22 02:34:24,339 INFO L87 Difference]: Start difference. First operand 264 states and 311 transitions. Second operand has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:26,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:34:26,354 INFO L93 Difference]: Finished difference Result 392 states and 447 transitions. [2022-11-22 02:34:26,355 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-22 02:34:26,355 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-22 02:34:26,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:34:26,355 INFO L225 Difference]: With dead ends: 392 [2022-11-22 02:34:26,355 INFO L226 Difference]: Without dead ends: 329 [2022-11-22 02:34:26,356 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 147 GetRequests, 83 SyntacticMatches, 1 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1004 ImplicationChecksByTransitivity, 7.0s TimeCoverageRelationStatistics Valid=435, Invalid=3725, Unknown=0, NotChecked=0, Total=4160 [2022-11-22 02:34:26,356 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 310 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 486 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 310 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 495 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 486 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 02:34:26,357 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [310 Valid, 157 Invalid, 495 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 486 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-22 02:34:26,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2022-11-22 02:34:26,360 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 326. [2022-11-22 02:34:26,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 326 states, 323 states have (on average 1.1640866873065014) internal successors, (376), 325 states have internal predecessors, (376), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:26,362 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 326 states to 326 states and 376 transitions. [2022-11-22 02:34:26,362 INFO L78 Accepts]: Start accepts. Automaton has 326 states and 376 transitions. Word has length 39 [2022-11-22 02:34:26,362 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:34:26,362 INFO L495 AbstractCegarLoop]: Abstraction has 326 states and 376 transitions. [2022-11-22 02:34:26,363 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:26,363 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 376 transitions. [2022-11-22 02:34:26,363 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-22 02:34:26,363 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:34:26,363 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:34:26,369 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-22 02:34:26,564 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-11-22 02:34:26,564 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:34:26,564 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:34:26,564 INFO L85 PathProgramCache]: Analyzing trace with hash 94811765, now seen corresponding path program 2 times [2022-11-22 02:34:26,564 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:34:26,565 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [741748232] [2022-11-22 02:34:26,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:34:26,565 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:34:26,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:34:27,470 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 12 proven. 30 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:34:27,471 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:34:27,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [741748232] [2022-11-22 02:34:27,471 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [741748232] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:34:27,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1386295117] [2022-11-22 02:34:27,471 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:34:27,471 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:27,471 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:34:27,472 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:34:27,474 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-22 02:34:27,626 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 02:34:27,626 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:34:27,628 INFO L263 TraceCheckSpWp]: Trace formula consists of 280 conjuncts, 67 conjunts are in the unsatisfiable core [2022-11-22 02:34:27,631 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:34:27,638 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:34:27,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:27,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:34:28,972 INFO L321 Elim1Store]: treesize reduction 53, result has 49.5 percent of original size [2022-11-22 02:34:28,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 66 treesize of output 79 [2022-11-22 02:34:29,009 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 12 proven. 21 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:29,009 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:34:29,723 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:34:29,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 54 [2022-11-22 02:34:29,756 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:34:29,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 136 treesize of output 156 [2022-11-22 02:34:29,780 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:34:29,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 79 treesize of output 81 [2022-11-22 02:34:30,357 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 17 proven. 16 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:30,357 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1386295117] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:34:30,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1930985568] [2022-11-22 02:34:30,358 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:34:30,358 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:34:30,359 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:34:30,359 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:34:30,359 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:34:30,391 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:34:30,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:34:30,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:30,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:30,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:30,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:30,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:30,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:30,637 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:34:30,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:34:31,858 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:34:35,517 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9997#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:34:35,517 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:34:35,517 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:34:35,518 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 48 [2022-11-22 02:34:35,518 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1725786092] [2022-11-22 02:34:35,518 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:34:35,518 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-22 02:34:35,518 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:34:35,519 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-22 02:34:35,519 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=300, Invalid=3845, Unknown=15, NotChecked=0, Total=4160 [2022-11-22 02:34:35,520 INFO L87 Difference]: Start difference. First operand 326 states and 376 transitions. Second operand has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:37,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:34:37,922 INFO L93 Difference]: Finished difference Result 312 states and 357 transitions. [2022-11-22 02:34:37,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-22 02:34:37,923 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-22 02:34:37,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:34:37,924 INFO L225 Difference]: With dead ends: 312 [2022-11-22 02:34:37,924 INFO L226 Difference]: Without dead ends: 237 [2022-11-22 02:34:37,925 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 72 SyntacticMatches, 1 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1715 ImplicationChecksByTransitivity, 7.5s TimeCoverageRelationStatistics Valid=726, Invalid=6399, Unknown=15, NotChecked=0, Total=7140 [2022-11-22 02:34:37,925 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 262 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 658 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 262 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 674 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 658 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 02:34:37,926 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [262 Valid, 157 Invalid, 674 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 658 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-22 02:34:37,926 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237 states. [2022-11-22 02:34:37,930 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237 to 236. [2022-11-22 02:34:37,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 233 states have (on average 1.184549356223176) internal successors, (276), 235 states have internal predecessors, (276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:37,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 276 transitions. [2022-11-22 02:34:37,931 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 276 transitions. Word has length 40 [2022-11-22 02:34:37,931 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:34:37,931 INFO L495 AbstractCegarLoop]: Abstraction has 236 states and 276 transitions. [2022-11-22 02:34:37,932 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:37,932 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 276 transitions. [2022-11-22 02:34:37,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-22 02:34:37,932 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:34:37,933 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:34:37,940 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-22 02:34:38,140 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-22 02:34:38,140 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:34:38,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:34:38,141 INFO L85 PathProgramCache]: Analyzing trace with hash 1463732113, now seen corresponding path program 5 times [2022-11-22 02:34:38,141 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:34:38,141 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [564143836] [2022-11-22 02:34:38,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:34:38,141 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:34:38,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:34:38,463 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 1 proven. 38 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:34:38,463 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:34:38,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [564143836] [2022-11-22 02:34:38,463 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [564143836] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:34:38,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [947154169] [2022-11-22 02:34:38,464 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:34:38,464 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:38,464 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:34:38,465 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:34:38,491 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-22 02:34:38,630 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-22 02:34:38,630 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:34:38,633 INFO L263 TraceCheckSpWp]: Trace formula consists of 287 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-22 02:34:38,634 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:34:38,916 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 35 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:34:38,916 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:34:39,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-22 02:34:39,259 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 35 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:34:39,259 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [947154169] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:34:39,259 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1779779768] [2022-11-22 02:34:39,261 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:34:39,261 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:34:39,261 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:34:39,261 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:34:39,262 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:34:39,288 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:34:39,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:34:39,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:34:39,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:39,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:39,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:39,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:34:39,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:39,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:39,600 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:34:39,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:34:39,816 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:34:43,843 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10870#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:34:43,843 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:34:43,843 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:34:43,843 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 11, 11] total 27 [2022-11-22 02:34:43,843 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [880285798] [2022-11-22 02:34:43,843 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:34:43,844 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-22 02:34:43,844 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:34:43,844 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-22 02:34:43,844 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=225, Invalid=1755, Unknown=0, NotChecked=0, Total=1980 [2022-11-22 02:34:43,844 INFO L87 Difference]: Start difference. First operand 236 states and 276 transitions. Second operand has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:44,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:34:44,393 INFO L93 Difference]: Finished difference Result 404 states and 464 transitions. [2022-11-22 02:34:44,393 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-22 02:34:44,393 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-22 02:34:44,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:34:44,395 INFO L225 Difference]: With dead ends: 404 [2022-11-22 02:34:44,395 INFO L226 Difference]: Without dead ends: 404 [2022-11-22 02:34:44,396 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 83 SyntacticMatches, 4 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 894 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=434, Invalid=2536, Unknown=0, NotChecked=0, Total=2970 [2022-11-22 02:34:44,396 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 743 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 366 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 743 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 391 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 366 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:34:44,397 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [743 Valid, 62 Invalid, 391 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 366 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:34:44,397 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 404 states. [2022-11-22 02:34:44,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 404 to 303. [2022-11-22 02:34:44,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 300 states have (on average 1.19) internal successors, (357), 302 states have internal predecessors, (357), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:44,405 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 357 transitions. [2022-11-22 02:34:44,405 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 357 transitions. Word has length 41 [2022-11-22 02:34:44,405 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:34:44,405 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 357 transitions. [2022-11-22 02:34:44,405 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:44,405 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 357 transitions. [2022-11-22 02:34:44,406 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-22 02:34:44,406 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:34:44,406 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:34:44,420 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-22 02:34:44,612 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable35,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:44,612 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:34:44,612 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:34:44,612 INFO L85 PathProgramCache]: Analyzing trace with hash 525396335, now seen corresponding path program 3 times [2022-11-22 02:34:44,612 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:34:44,613 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [828281142] [2022-11-22 02:34:44,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:34:44,613 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:34:44,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:34:44,976 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 1 proven. 37 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:44,977 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:34:44,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [828281142] [2022-11-22 02:34:44,977 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [828281142] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:34:44,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1210574984] [2022-11-22 02:34:44,977 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:34:44,977 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:44,977 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:34:44,979 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:34:45,017 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-22 02:34:45,154 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:34:45,154 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:34:45,157 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-22 02:34:45,158 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:34:45,417 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:45,417 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:34:45,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:34:45,804 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:45,804 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1210574984] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:34:45,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [385373865] [2022-11-22 02:34:45,805 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:34:45,805 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:34:45,806 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:34:45,806 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:34:45,806 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:34:45,827 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:34:45,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:34:45,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:45,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:45,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:45,980 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:34:46,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:46,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:46,069 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:34:46,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:34:47,335 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:34:50,059 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11885#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:34:50,059 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:34:50,059 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:34:50,059 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 24 [2022-11-22 02:34:50,059 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2028197522] [2022-11-22 02:34:50,059 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:34:50,060 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-22 02:34:50,060 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:34:50,060 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-22 02:34:50,060 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=185, Invalid=1537, Unknown=0, NotChecked=0, Total=1722 [2022-11-22 02:34:50,061 INFO L87 Difference]: Start difference. First operand 303 states and 357 transitions. Second operand has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:50,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:34:50,900 INFO L93 Difference]: Finished difference Result 351 states and 399 transitions. [2022-11-22 02:34:50,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-22 02:34:50,901 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-22 02:34:50,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:34:50,902 INFO L225 Difference]: With dead ends: 351 [2022-11-22 02:34:50,903 INFO L226 Difference]: Without dead ends: 351 [2022-11-22 02:34:50,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 90 SyntacticMatches, 4 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 900 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=522, Invalid=2900, Unknown=0, NotChecked=0, Total=3422 [2022-11-22 02:34:50,904 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 510 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 469 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 510 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 482 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 469 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:34:50,904 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [510 Valid, 75 Invalid, 482 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 469 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:34:50,905 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2022-11-22 02:34:50,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 303. [2022-11-22 02:34:50,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 300 states have (on average 1.1833333333333333) internal successors, (355), 302 states have internal predecessors, (355), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:50,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 355 transitions. [2022-11-22 02:34:50,911 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 355 transitions. Word has length 42 [2022-11-22 02:34:50,911 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:34:50,911 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 355 transitions. [2022-11-22 02:34:50,911 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:34:50,911 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 355 transitions. [2022-11-22 02:34:50,912 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-22 02:34:50,912 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:34:50,912 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:34:50,919 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2022-11-22 02:34:51,117 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable36,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:51,118 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:34:51,118 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:34:51,118 INFO L85 PathProgramCache]: Analyzing trace with hash -1182475613, now seen corresponding path program 6 times [2022-11-22 02:34:51,118 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:34:51,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1351513170] [2022-11-22 02:34:51,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:34:51,118 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:34:51,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:34:51,556 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 46 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:34:51,557 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:34:51,557 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1351513170] [2022-11-22 02:34:51,557 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1351513170] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:34:51,557 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [410538613] [2022-11-22 02:34:51,557 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:34:51,557 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:34:51,557 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:34:51,558 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:34:51,575 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-22 02:34:51,732 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:34:51,732 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:34:51,735 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 95 conjunts are in the unsatisfiable core [2022-11-22 02:34:51,737 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:34:52,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:52,170 INFO L321 Elim1Store]: treesize reduction 27, result has 25.0 percent of original size [2022-11-22 02:34:52,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 22 [2022-11-22 02:34:52,947 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:34:52,967 INFO L321 Elim1Store]: treesize reduction 40, result has 23.1 percent of original size [2022-11-22 02:34:52,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 56 treesize of output 35 [2022-11-22 02:34:53,003 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 54 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:34:53,003 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:34:53,558 INFO L321 Elim1Store]: treesize reduction 19, result has 53.7 percent of original size [2022-11-22 02:34:53,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 187 treesize of output 147 [2022-11-22 02:34:53,571 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:34:53,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 143 treesize of output 137 [2022-11-22 02:34:53,597 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 02:34:53,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 22 [2022-11-22 02:34:53,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 02:34:53,903 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 39 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:34:53,903 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [410538613] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:34:53,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1542694371] [2022-11-22 02:34:53,905 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:34:53,905 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:34:53,905 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:34:53,905 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:34:53,906 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:34:53,936 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:34:53,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:34:53,975 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:54,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:54,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:54,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:34:54,101 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:54,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:34:54,154 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:34:54,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:34:54,431 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:34:57,915 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12883#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:34:57,915 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:34:57,916 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:34:57,916 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 20, 17] total 47 [2022-11-22 02:34:57,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1169088732] [2022-11-22 02:34:57,916 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:34:57,916 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-22 02:34:57,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:34:57,917 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-22 02:34:57,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=3542, Unknown=0, NotChecked=0, Total=3782 [2022-11-22 02:34:57,917 INFO L87 Difference]: Start difference. First operand 303 states and 355 transitions. Second operand has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:05,794 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:35:05,794 INFO L93 Difference]: Finished difference Result 839 states and 949 transitions. [2022-11-22 02:35:05,795 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 66 states. [2022-11-22 02:35:05,795 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-22 02:35:05,795 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:35:05,799 INFO L225 Difference]: With dead ends: 839 [2022-11-22 02:35:05,799 INFO L226 Difference]: Without dead ends: 839 [2022-11-22 02:35:05,801 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 76 SyntacticMatches, 0 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3124 ImplicationChecksByTransitivity, 9.8s TimeCoverageRelationStatistics Valid=1374, Invalid=11966, Unknown=0, NotChecked=0, Total=13340 [2022-11-22 02:35:05,801 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 987 mSDsluCounter, 827 mSDsCounter, 0 mSdLazyCounter, 4092 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 987 SdHoareTripleChecker+Valid, 862 SdHoareTripleChecker+Invalid, 4107 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 4092 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-11-22 02:35:05,802 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [987 Valid, 862 Invalid, 4107 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 4092 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-11-22 02:35:05,803 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 839 states. [2022-11-22 02:35:05,812 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 839 to 355. [2022-11-22 02:35:05,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 352 states have (on average 1.1988636363636365) internal successors, (422), 354 states have internal predecessors, (422), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:05,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 422 transitions. [2022-11-22 02:35:05,814 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 422 transitions. Word has length 42 [2022-11-22 02:35:05,814 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:35:05,814 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 422 transitions. [2022-11-22 02:35:05,814 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:05,814 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 422 transitions. [2022-11-22 02:35:05,815 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-22 02:35:05,815 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:35:05,815 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:35:05,826 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-22 02:35:06,021 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-22 02:35:06,022 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:35:06,022 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:35:06,022 INFO L85 PathProgramCache]: Analyzing trace with hash -487556779, now seen corresponding path program 4 times [2022-11-22 02:35:06,022 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:35:06,022 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1055349489] [2022-11-22 02:35:06,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:35:06,022 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:35:06,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:35:06,411 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 1 proven. 43 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:35:06,411 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:35:06,411 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1055349489] [2022-11-22 02:35:06,411 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1055349489] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:35:06,411 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1041815148] [2022-11-22 02:35:06,411 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:35:06,411 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:35:06,412 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:35:06,412 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:35:06,415 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-22 02:35:06,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:35:06,556 INFO L263 TraceCheckSpWp]: Trace formula consists of 311 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-22 02:35:06,558 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:35:06,812 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:35:06,812 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:35:07,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:35:07,170 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:35:07,171 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1041815148] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:35:07,171 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2030835474] [2022-11-22 02:35:07,172 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:35:07,172 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:35:07,173 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:35:07,173 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:35:07,173 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:35:07,189 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:35:07,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:35:07,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:07,260 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:07,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:07,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:35:07,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:07,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:07,422 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:35:07,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:35:08,581 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:35:11,328 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14483#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:35:11,328 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:35:11,328 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:35:11,329 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 24 [2022-11-22 02:35:11,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [185497656] [2022-11-22 02:35:11,329 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:35:11,329 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-22 02:35:11,329 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:35:11,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-22 02:35:11,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=186, Invalid=1536, Unknown=0, NotChecked=0, Total=1722 [2022-11-22 02:35:11,330 INFO L87 Difference]: Start difference. First operand 355 states and 422 transitions. Second operand has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:12,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:35:12,194 INFO L93 Difference]: Finished difference Result 407 states and 465 transitions. [2022-11-22 02:35:12,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-22 02:35:12,195 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-11-22 02:35:12,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:35:12,197 INFO L225 Difference]: With dead ends: 407 [2022-11-22 02:35:12,197 INFO L226 Difference]: Without dead ends: 407 [2022-11-22 02:35:12,197 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 96 SyntacticMatches, 4 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 870 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=490, Invalid=2816, Unknown=0, NotChecked=0, Total=3306 [2022-11-22 02:35:12,198 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 568 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 447 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 568 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 461 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 447 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 02:35:12,198 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [568 Valid, 74 Invalid, 461 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 447 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-22 02:35:12,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 407 states. [2022-11-22 02:35:12,204 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 407 to 355. [2022-11-22 02:35:12,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 352 states have (on average 1.1903409090909092) internal successors, (419), 354 states have internal predecessors, (419), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:12,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 419 transitions. [2022-11-22 02:35:12,206 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 419 transitions. Word has length 44 [2022-11-22 02:35:12,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:35:12,206 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 419 transitions. [2022-11-22 02:35:12,206 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:12,207 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 419 transitions. [2022-11-22 02:35:12,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-22 02:35:12,207 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:35:12,208 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:35:12,220 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-22 02:35:12,413 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-22 02:35:12,413 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:35:12,414 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:35:12,414 INFO L85 PathProgramCache]: Analyzing trace with hash 1760874124, now seen corresponding path program 4 times [2022-11-22 02:35:12,414 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:35:12,414 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [914843487] [2022-11-22 02:35:12,414 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:35:12,414 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:35:12,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:35:12,847 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 4 proven. 58 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:35:12,847 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:35:12,847 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [914843487] [2022-11-22 02:35:12,847 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [914843487] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:35:12,847 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [602765306] [2022-11-22 02:35:12,847 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:35:12,848 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:35:12,848 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:35:12,851 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:35:12,871 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-22 02:35:13,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:35:13,013 INFO L263 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 38 conjunts are in the unsatisfiable core [2022-11-22 02:35:13,015 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:35:13,296 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 9 proven. 53 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:35:13,296 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:35:13,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:35:13,731 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 9 proven. 53 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:35:13,731 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [602765306] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:35:13,732 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [946682132] [2022-11-22 02:35:13,733 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:35:13,733 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:35:13,733 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:35:13,733 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:35:13,734 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:35:13,771 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:35:13,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:35:13,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:35:13,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:13,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:13,919 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:35:13,969 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 02:35:13,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-22 02:35:14,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:14,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:14,080 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:35:14,080 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:35:14,363 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:35:17,094 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15600#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:35:17,094 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:35:17,094 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:35:17,094 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 29 [2022-11-22 02:35:17,094 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1573987960] [2022-11-22 02:35:17,094 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:35:17,094 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-22 02:35:17,095 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:35:17,095 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-22 02:35:17,095 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1783, Unknown=0, NotChecked=0, Total=1980 [2022-11-22 02:35:17,095 INFO L87 Difference]: Start difference. First operand 355 states and 419 transitions. Second operand has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:18,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:35:18,130 INFO L93 Difference]: Finished difference Result 666 states and 773 transitions. [2022-11-22 02:35:18,130 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-22 02:35:18,130 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-22 02:35:18,130 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:35:18,132 INFO L225 Difference]: With dead ends: 666 [2022-11-22 02:35:18,132 INFO L226 Difference]: Without dead ends: 666 [2022-11-22 02:35:18,133 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 103 SyntacticMatches, 5 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 968 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=549, Invalid=3111, Unknown=0, NotChecked=0, Total=3660 [2022-11-22 02:35:18,133 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 379 mSDsluCounter, 160 mSDsCounter, 0 mSdLazyCounter, 820 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 379 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 824 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 820 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 02:35:18,133 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [379 Valid, 185 Invalid, 824 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 820 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-22 02:35:18,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 666 states. [2022-11-22 02:35:18,141 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 666 to 358. [2022-11-22 02:35:18,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 358 states, 355 states have (on average 1.1887323943661972) internal successors, (422), 357 states have internal predecessors, (422), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:18,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 358 states to 358 states and 422 transitions. [2022-11-22 02:35:18,143 INFO L78 Accepts]: Start accepts. Automaton has 358 states and 422 transitions. Word has length 47 [2022-11-22 02:35:18,144 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:35:18,144 INFO L495 AbstractCegarLoop]: Abstraction has 358 states and 422 transitions. [2022-11-22 02:35:18,144 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:18,144 INFO L276 IsEmpty]: Start isEmpty. Operand 358 states and 422 transitions. [2022-11-22 02:35:18,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-22 02:35:18,145 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:35:18,145 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:35:18,152 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-22 02:35:18,351 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-22 02:35:18,352 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:35:18,352 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:35:18,352 INFO L85 PathProgramCache]: Analyzing trace with hash 298207322, now seen corresponding path program 5 times [2022-11-22 02:35:18,352 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:35:18,352 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1646107726] [2022-11-22 02:35:18,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:35:18,352 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:35:18,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:35:19,431 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 57 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:35:19,431 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:35:19,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1646107726] [2022-11-22 02:35:19,432 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1646107726] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:35:19,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1413298818] [2022-11-22 02:35:19,432 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:35:19,432 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:35:19,432 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:35:19,433 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:35:19,435 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-22 02:35:19,638 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-22 02:35:19,638 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:35:19,641 INFO L263 TraceCheckSpWp]: Trace formula consists of 336 conjuncts, 84 conjunts are in the unsatisfiable core [2022-11-22 02:35:19,647 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:35:19,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:35:19,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 02:35:19,875 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 02:35:20,358 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:35:20,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 21 [2022-11-22 02:35:20,395 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 41 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:35:20,395 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:35:20,854 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (v_ArrVal_939 (Array Int Int))) (let ((.cse0 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_939))) (let ((.cse1 (select (select .cse0 |ULTIMATE.start_substring_~pt~0#1.base|) (+ 2 |c_ULTIMATE.start_main_~nondetString2~0#1.offset|)))) (or (not (= (select (select .cse0 |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) .cse1)) (= .cse1 0))))) is different from false [2022-11-22 02:35:20,863 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:35:20,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 46 [2022-11-22 02:35:20,888 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:35:20,889 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 123 treesize of output 122 [2022-11-22 02:35:20,903 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:35:20,903 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 74 treesize of output 64 [2022-11-22 02:35:21,447 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 41 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:35:21,447 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1413298818] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:35:21,447 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [647477284] [2022-11-22 02:35:21,448 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:35:21,448 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:35:21,449 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:35:21,449 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:35:21,449 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:35:21,485 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:35:21,486 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:35:21,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:21,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:21,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:21,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:21,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:21,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:21,727 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:35:21,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:35:22,884 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:35:26,449 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17002#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:35:26,449 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:35:26,449 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:35:26,450 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 17, 17] total 43 [2022-11-22 02:35:26,450 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [666660075] [2022-11-22 02:35:26,450 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:35:26,450 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-11-22 02:35:26,450 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:35:26,450 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-11-22 02:35:26,452 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=3185, Unknown=1, NotChecked=114, Total=3540 [2022-11-22 02:35:26,452 INFO L87 Difference]: Start difference. First operand 358 states and 422 transitions. Second operand has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:40,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:35:40,586 INFO L93 Difference]: Finished difference Result 647 states and 744 transitions. [2022-11-22 02:35:40,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-11-22 02:35:40,587 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-22 02:35:40,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:35:40,589 INFO L225 Difference]: With dead ends: 647 [2022-11-22 02:35:40,589 INFO L226 Difference]: Without dead ends: 647 [2022-11-22 02:35:40,590 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 106 SyntacticMatches, 6 SemanticMatches, 105 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 3131 ImplicationChecksByTransitivity, 17.3s TimeCoverageRelationStatistics Valid=1092, Invalid=10041, Unknown=1, NotChecked=208, Total=11342 [2022-11-22 02:35:40,590 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 948 mSDsluCounter, 502 mSDsCounter, 0 mSdLazyCounter, 2258 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 948 SdHoareTripleChecker+Valid, 533 SdHoareTripleChecker+Invalid, 2433 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 2258 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 166 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-22 02:35:40,591 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [948 Valid, 533 Invalid, 2433 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 2258 Invalid, 0 Unknown, 166 Unchecked, 1.7s Time] [2022-11-22 02:35:40,591 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 647 states. [2022-11-22 02:35:40,598 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 647 to 377. [2022-11-22 02:35:40,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 374 states have (on average 1.1844919786096257) internal successors, (443), 376 states have internal predecessors, (443), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:40,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 443 transitions. [2022-11-22 02:35:40,600 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 443 transitions. Word has length 49 [2022-11-22 02:35:40,600 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:35:40,601 INFO L495 AbstractCegarLoop]: Abstraction has 377 states and 443 transitions. [2022-11-22 02:35:40,601 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:35:40,601 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 443 transitions. [2022-11-22 02:35:40,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-22 02:35:40,602 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:35:40,602 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:35:40,611 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-22 02:35:40,808 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable40 [2022-11-22 02:35:40,808 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:35:40,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:35:40,809 INFO L85 PathProgramCache]: Analyzing trace with hash -17042882, now seen corresponding path program 7 times [2022-11-22 02:35:40,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:35:40,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [586602469] [2022-11-22 02:35:40,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:35:40,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:35:40,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:35:41,712 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 5 proven. 66 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:35:41,712 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:35:41,712 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [586602469] [2022-11-22 02:35:41,712 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [586602469] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:35:41,712 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1862893885] [2022-11-22 02:35:41,712 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:35:41,713 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:35:41,713 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:35:41,715 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:35:41,747 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-22 02:35:41,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:35:41,900 INFO L263 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-22 02:35:41,903 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:35:42,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:43,104 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:35:43,107 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:35:43,107 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-22 02:35:43,111 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:35:43,111 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:35:43,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 02:35:43,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2022-11-22 02:35:44,118 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:35:44,118 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1862893885] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:35:44,118 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1574069743] [2022-11-22 02:35:44,119 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:35:44,119 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:35:44,120 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:35:44,120 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:35:44,120 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:35:44,145 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:35:44,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:35:44,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:35:44,213 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:44,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:44,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:44,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:35:44,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:44,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:35:44,455 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:35:44,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:35:44,647 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:35:49,905 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18477#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:35:49,905 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:35:49,905 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:35:49,906 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 17, 17] total 48 [2022-11-22 02:35:49,906 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [323377703] [2022-11-22 02:35:49,906 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:35:49,906 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-22 02:35:49,906 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:35:49,906 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-22 02:35:49,907 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=217, Invalid=3689, Unknown=0, NotChecked=0, Total=3906 [2022-11-22 02:35:49,907 INFO L87 Difference]: Start difference. First operand 377 states and 443 transitions. Second operand has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:03,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:36:03,013 INFO L93 Difference]: Finished difference Result 1450 states and 1636 transitions. [2022-11-22 02:36:03,013 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 113 states. [2022-11-22 02:36:03,013 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-22 02:36:03,027 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:36:03,030 INFO L225 Difference]: With dead ends: 1450 [2022-11-22 02:36:03,030 INFO L226 Difference]: Without dead ends: 1430 [2022-11-22 02:36:03,033 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 102 SyntacticMatches, 1 SemanticMatches, 165 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7445 ImplicationChecksByTransitivity, 14.8s TimeCoverageRelationStatistics Valid=1927, Invalid=25795, Unknown=0, NotChecked=0, Total=27722 [2022-11-22 02:36:03,033 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 1712 mSDsluCounter, 2346 mSDsCounter, 0 mSdLazyCounter, 6669 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1712 SdHoareTripleChecker+Valid, 2435 SdHoareTripleChecker+Invalid, 6695 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 6669 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:36:03,034 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1712 Valid, 2435 Invalid, 6695 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 6669 Invalid, 0 Unknown, 0 Unchecked, 5.2s Time] [2022-11-22 02:36:03,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1430 states. [2022-11-22 02:36:03,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1430 to 564. [2022-11-22 02:36:03,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1871657754010696) internal successors, (666), 563 states have internal predecessors, (666), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:03,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 666 transitions. [2022-11-22 02:36:03,049 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 666 transitions. Word has length 49 [2022-11-22 02:36:03,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:36:03,049 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 666 transitions. [2022-11-22 02:36:03,050 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:03,050 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 666 transitions. [2022-11-22 02:36:03,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-22 02:36:03,051 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:36:03,051 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:36:03,059 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-22 02:36:03,257 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:36:03,257 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:36:03,257 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:36:03,258 INFO L85 PathProgramCache]: Analyzing trace with hash 999448052, now seen corresponding path program 6 times [2022-11-22 02:36:03,258 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:36:03,258 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1630613819] [2022-11-22 02:36:03,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:36:03,258 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:36:03,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:36:04,171 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:36:04,171 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:36:04,171 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1630613819] [2022-11-22 02:36:04,171 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1630613819] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:36:04,171 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [411220206] [2022-11-22 02:36:04,171 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:36:04,171 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:36:04,172 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:36:04,172 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:36:04,179 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-22 02:36:04,335 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:36:04,335 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:36:04,337 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 53 conjunts are in the unsatisfiable core [2022-11-22 02:36:04,340 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:36:04,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:36:04,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:04,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:36:04,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 02:36:04,808 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:36:04,808 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:36:04,898 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1030 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1030) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)))) is different from false [2022-11-22 02:36:04,905 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:36:04,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:36:04,913 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:36:04,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:36:05,109 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:36:05,109 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [411220206] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:36:05,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [698902541] [2022-11-22 02:36:05,111 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:36:05,111 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:36:05,111 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:36:05,111 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:36:05,111 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:36:05,142 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:36:05,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:36:05,178 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:05,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:05,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:05,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:36:05,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:05,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:05,379 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:36:05,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:36:05,786 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:36:09,947 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21037#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:36:09,947 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:36:09,947 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:36:09,947 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 13, 13] total 29 [2022-11-22 02:36:09,947 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [491116357] [2022-11-22 02:36:09,947 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:36:09,948 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-22 02:36:09,948 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:36:09,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-22 02:36:09,949 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=155, Invalid=1828, Unknown=1, NotChecked=86, Total=2070 [2022-11-22 02:36:09,949 INFO L87 Difference]: Start difference. First operand 564 states and 666 transitions. Second operand has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:11,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:36:11,243 INFO L93 Difference]: Finished difference Result 767 states and 886 transitions. [2022-11-22 02:36:11,244 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-22 02:36:11,244 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-22 02:36:11,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:36:11,247 INFO L225 Difference]: With dead ends: 767 [2022-11-22 02:36:11,247 INFO L226 Difference]: Without dead ends: 676 [2022-11-22 02:36:11,247 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 179 GetRequests, 118 SyntacticMatches, 3 SemanticMatches, 58 ConstructedPredicates, 1 IntricatePredicates, 1 DeprecatedPredicates, 629 ImplicationChecksByTransitivity, 5.8s TimeCoverageRelationStatistics Valid=295, Invalid=3130, Unknown=1, NotChecked=114, Total=3540 [2022-11-22 02:36:11,248 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 288 mSDsluCounter, 253 mSDsCounter, 0 mSdLazyCounter, 638 mSolverCounterSat, 12 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 267 SdHoareTripleChecker+Invalid, 695 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 638 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 43 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 02:36:11,248 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 267 Invalid, 695 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 638 Invalid, 2 Unknown, 43 Unchecked, 0.5s Time] [2022-11-22 02:36:11,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 676 states. [2022-11-22 02:36:11,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 676 to 669. [2022-11-22 02:36:11,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 669 states, 666 states have (on average 1.1681681681681682) internal successors, (778), 668 states have internal predecessors, (778), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:11,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 669 states to 669 states and 778 transitions. [2022-11-22 02:36:11,259 INFO L78 Accepts]: Start accepts. Automaton has 669 states and 778 transitions. Word has length 50 [2022-11-22 02:36:11,259 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:36:11,259 INFO L495 AbstractCegarLoop]: Abstraction has 669 states and 778 transitions. [2022-11-22 02:36:11,259 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:11,260 INFO L276 IsEmpty]: Start isEmpty. Operand 669 states and 778 transitions. [2022-11-22 02:36:11,261 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-22 02:36:11,261 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:36:11,261 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-22 02:36:11,273 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-22 02:36:11,466 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable42,26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:36:11,467 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:36:11,467 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:36:11,467 INFO L85 PathProgramCache]: Analyzing trace with hash 49454004, now seen corresponding path program 6 times [2022-11-22 02:36:11,467 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:36:11,467 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [555565923] [2022-11-22 02:36:11,467 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:36:11,467 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:36:11,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:36:12,504 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:36:12,504 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:36:12,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [555565923] [2022-11-22 02:36:12,504 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [555565923] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:36:12,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1399299712] [2022-11-22 02:36:12,504 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:36:12,504 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:36:12,505 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:36:12,505 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:36:12,507 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-22 02:36:12,677 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:36:12,678 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:36:12,680 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-22 02:36:12,683 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:36:12,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:36:12,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:13,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:36:13,358 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-11-22 02:36:13,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-11-22 02:36:13,362 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:36:13,362 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:36:13,565 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:36:13,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:36:13,572 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:36:13,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:36:13,817 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:36:13,817 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1399299712] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:36:13,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2068712052] [2022-11-22 02:36:13,818 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:36:13,818 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:36:13,819 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:36:13,819 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:36:13,819 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:36:13,848 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:36:13,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:36:13,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:36:13,928 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:13,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:13,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:36:14,040 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 02:36:14,040 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-22 02:36:14,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:14,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:14,139 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:36:14,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:36:15,313 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:36:18,694 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22854#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:36:18,694 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:36:18,694 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:36:18,694 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 17, 17] total 36 [2022-11-22 02:36:18,695 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [433166705] [2022-11-22 02:36:18,695 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:36:18,695 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-11-22 02:36:18,695 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:36:18,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-11-22 02:36:18,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=191, Invalid=2553, Unknown=12, NotChecked=0, Total=2756 [2022-11-22 02:36:18,696 INFO L87 Difference]: Start difference. First operand 669 states and 778 transitions. Second operand has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:20,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:36:20,500 INFO L93 Difference]: Finished difference Result 645 states and 746 transitions. [2022-11-22 02:36:20,500 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-22 02:36:20,501 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-22 02:36:20,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:36:20,503 INFO L225 Difference]: With dead ends: 645 [2022-11-22 02:36:20,503 INFO L226 Difference]: Without dead ends: 468 [2022-11-22 02:36:20,504 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 192 GetRequests, 117 SyntacticMatches, 4 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 1104 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=470, Invalid=4774, Unknown=12, NotChecked=0, Total=5256 [2022-11-22 02:36:20,504 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 325 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 935 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 325 SdHoareTripleChecker+Valid, 287 SdHoareTripleChecker+Invalid, 950 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 935 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 02:36:20,504 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [325 Valid, 287 Invalid, 950 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 935 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-22 02:36:20,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 468 states. [2022-11-22 02:36:20,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 468 to 468. [2022-11-22 02:36:20,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 468 states, 465 states have (on average 1.1913978494623656) internal successors, (554), 467 states have internal predecessors, (554), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:20,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 554 transitions. [2022-11-22 02:36:20,513 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 554 transitions. Word has length 51 [2022-11-22 02:36:20,513 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:36:20,513 INFO L495 AbstractCegarLoop]: Abstraction has 468 states and 554 transitions. [2022-11-22 02:36:20,513 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:20,513 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 554 transitions. [2022-11-22 02:36:20,514 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-22 02:36:20,514 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:36:20,514 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:36:20,523 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-22 02:36:20,720 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable43,27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:36:20,721 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:36:20,721 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:36:20,721 INFO L85 PathProgramCache]: Analyzing trace with hash 523030176, now seen corresponding path program 7 times [2022-11-22 02:36:20,721 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:36:20,721 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [808753793] [2022-11-22 02:36:20,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:36:20,721 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:36:20,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:36:21,159 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 4 proven. 60 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:36:21,159 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:36:21,159 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [808753793] [2022-11-22 02:36:21,159 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [808753793] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:36:21,159 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [543722987] [2022-11-22 02:36:21,159 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:36:21,159 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:36:21,160 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:36:21,160 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:36:21,179 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-22 02:36:21,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:36:21,345 INFO L263 TraceCheckSpWp]: Trace formula consists of 362 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-22 02:36:21,347 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:36:21,652 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 55 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:36:21,652 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:36:22,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:36:22,099 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 55 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-22 02:36:22,099 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [543722987] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:36:22,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1231474278] [2022-11-22 02:36:22,100 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:36:22,100 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:36:22,100 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:36:22,101 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:36:22,101 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:36:22,121 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:36:22,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:36:22,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:36:22,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:22,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:22,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:36:22,329 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 02:36:22,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-22 02:36:22,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:22,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:22,428 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:36:22,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:36:23,584 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:36:26,417 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24353#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:36:26,417 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:36:26,417 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:36:26,417 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 28 [2022-11-22 02:36:26,418 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [251731101] [2022-11-22 02:36:26,418 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:36:26,418 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-22 02:36:26,418 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:36:26,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-22 02:36:26,419 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=206, Invalid=1864, Unknown=0, NotChecked=0, Total=2070 [2022-11-22 02:36:26,419 INFO L87 Difference]: Start difference. First operand 468 states and 554 transitions. Second operand has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:27,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:36:27,561 INFO L93 Difference]: Finished difference Result 548 states and 628 transitions. [2022-11-22 02:36:27,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-22 02:36:27,562 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-22 02:36:27,562 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:36:27,563 INFO L225 Difference]: With dead ends: 548 [2022-11-22 02:36:27,563 INFO L226 Difference]: Without dead ends: 548 [2022-11-22 02:36:27,564 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 114 SyntacticMatches, 5 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1198 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=687, Invalid=3735, Unknown=0, NotChecked=0, Total=4422 [2022-11-22 02:36:27,564 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 692 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 648 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 692 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 667 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 648 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 02:36:27,564 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [692 Valid, 114 Invalid, 667 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 648 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-22 02:36:27,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 548 states. [2022-11-22 02:36:27,570 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 548 to 468. [2022-11-22 02:36:27,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 468 states, 465 states have (on average 1.1870967741935483) internal successors, (552), 467 states have internal predecessors, (552), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:27,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 552 transitions. [2022-11-22 02:36:27,572 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 552 transitions. Word has length 51 [2022-11-22 02:36:27,572 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:36:27,572 INFO L495 AbstractCegarLoop]: Abstraction has 468 states and 552 transitions. [2022-11-22 02:36:27,573 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:27,573 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 552 transitions. [2022-11-22 02:36:27,574 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-22 02:36:27,574 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:36:27,574 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:36:27,586 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Ended with exit code 0 [2022-11-22 02:36:27,779 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-11-22 02:36:27,780 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:36:27,780 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:36:27,780 INFO L85 PathProgramCache]: Analyzing trace with hash -620978066, now seen corresponding path program 7 times [2022-11-22 02:36:27,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:36:27,780 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [733508952] [2022-11-22 02:36:27,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:36:27,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:36:27,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:36:28,154 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 4 proven. 70 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:36:28,155 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:36:28,155 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [733508952] [2022-11-22 02:36:28,155 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [733508952] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:36:28,155 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2103921047] [2022-11-22 02:36:28,155 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:36:28,155 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:36:28,155 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:36:28,157 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:36:28,163 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-22 02:36:28,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:36:28,340 INFO L263 TraceCheckSpWp]: Trace formula consists of 348 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-22 02:36:28,342 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:36:28,656 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 65 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:36:28,657 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:36:29,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:36:29,111 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 65 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 02:36:29,111 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2103921047] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:36:29,111 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1741538262] [2022-11-22 02:36:29,112 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:36:29,112 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:36:29,113 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:36:29,113 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:36:29,113 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:36:29,137 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:36:29,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:36:29,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:36:29,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:29,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:29,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:36:29,355 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 02:36:29,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-22 02:36:29,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:29,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:29,461 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:36:29,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:36:29,884 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:36:33,628 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25761#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:36:33,628 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:36:33,628 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:36:33,628 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 26 [2022-11-22 02:36:33,628 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462970617] [2022-11-22 02:36:33,628 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:36:33,628 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-22 02:36:33,629 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:36:33,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-22 02:36:33,629 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1684, Unknown=0, NotChecked=0, Total=1892 [2022-11-22 02:36:33,629 INFO L87 Difference]: Start difference. First operand 468 states and 552 transitions. Second operand has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:34,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:36:34,102 INFO L93 Difference]: Finished difference Result 665 states and 783 transitions. [2022-11-22 02:36:34,103 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-22 02:36:34,103 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-22 02:36:34,103 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:36:34,104 INFO L225 Difference]: With dead ends: 665 [2022-11-22 02:36:34,104 INFO L226 Difference]: Without dead ends: 665 [2022-11-22 02:36:34,104 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 118 SyntacticMatches, 5 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 793 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=359, Invalid=2293, Unknown=0, NotChecked=0, Total=2652 [2022-11-22 02:36:34,104 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 363 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 458 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 363 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 465 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 458 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 02:36:34,105 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [363 Valid, 103 Invalid, 465 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 458 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 02:36:34,105 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 665 states. [2022-11-22 02:36:34,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 665 to 564. [2022-11-22 02:36:34,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1942959001782532) internal successors, (670), 563 states have internal predecessors, (670), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:34,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 670 transitions. [2022-11-22 02:36:34,113 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 670 transitions. Word has length 52 [2022-11-22 02:36:34,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:36:34,113 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 670 transitions. [2022-11-22 02:36:34,114 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:36:34,114 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 670 transitions. [2022-11-22 02:36:34,115 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-22 02:36:34,115 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:36:34,115 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-22 02:36:34,127 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-22 02:36:34,320 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-11-22 02:36:34,321 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:36:34,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:36:34,321 INFO L85 PathProgramCache]: Analyzing trace with hash 1355851898, now seen corresponding path program 8 times [2022-11-22 02:36:34,321 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:36:34,321 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [45853690] [2022-11-22 02:36:34,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:36:34,321 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:36:34,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:36:34,688 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 4 proven. 66 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:36:34,688 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:36:34,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [45853690] [2022-11-22 02:36:34,688 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [45853690] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:36:34,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2091906481] [2022-11-22 02:36:34,689 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:36:34,689 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:36:34,689 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:36:34,691 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:36:34,693 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-22 02:36:34,893 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 02:36:34,894 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:36:34,897 INFO L263 TraceCheckSpWp]: Trace formula consists of 328 conjuncts, 96 conjunts are in the unsatisfiable core [2022-11-22 02:36:34,900 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:36:34,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:36:35,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:36:35,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:36:36,495 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:36:36,496 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:36:36,498 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:36:36,561 INFO L321 Elim1Store]: treesize reduction 34, result has 62.6 percent of original size [2022-11-22 02:36:36,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 4 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 14 case distinctions, treesize of input 78 treesize of output 88 [2022-11-22 02:36:36,785 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 0 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-22 02:36:36,785 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:36:38,888 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (v_ArrVal_1216 (Array Int Int)) (|v_ULTIMATE.start_substring_~pt~0#1.base_263| Int) (|v_ULTIMATE.start_substring_~ps2~0#1.offset_259| Int)) (let ((.cse3 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1216))) (let ((.cse1 (select .cse3 |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (.cse0 (select (select .cse3 |ULTIMATE.start_substring_~pt~0#1.base|) |c_ULTIMATE.start_main_~nondetString2~0#1.offset|)) (.cse2 (select (select .cse3 |v_ULTIMATE.start_substring_~pt~0#1.base_263|) (+ |c_ULTIMATE.start_main_~nondetString2~0#1.offset| 1)))) (or (not (= .cse0 (select .cse1 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)))) (<= (+ 2 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|) (select |c_#length| |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (= (select .cse1 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0) (not (= .cse2 (select .cse1 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|))) (not (<= |v_ULTIMATE.start_substring_~ps2~0#1.offset_259| (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|))) (not (<= 0 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|)) (= .cse0 0) (= .cse2 0))))) is different from false [2022-11-22 02:36:38,909 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:36:38,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 152 treesize of output 86 [2022-11-22 02:36:39,021 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:36:39,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 1 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 14 case distinctions, treesize of input 239 treesize of output 328 [2022-11-22 02:36:39,101 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:36:39,102 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 2 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 8 case distinctions, treesize of input 148 treesize of output 190 [2022-11-22 02:36:39,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 02:37:02,275 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 0 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-22 02:37:02,275 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2091906481] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:37:02,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1756355934] [2022-11-22 02:37:02,276 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:37:02,276 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:37:02,277 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:37:02,277 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:37:02,277 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:37:02,297 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:37:02,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:37:02,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:37:02,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:02,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:02,431 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:37:02,479 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-22 02:37:02,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-22 02:37:02,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:02,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:02,575 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:37:02,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:37:03,726 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:37:07,627 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27386#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:37:07,627 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:37:07,627 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:37:07,627 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 19, 19] total 50 [2022-11-22 02:37:07,628 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134603884] [2022-11-22 02:37:07,628 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:37:07,628 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-11-22 02:37:07,628 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:37:07,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-11-22 02:37:07,629 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=310, Invalid=4115, Unknown=1, NotChecked=130, Total=4556 [2022-11-22 02:37:07,629 INFO L87 Difference]: Start difference. First operand 564 states and 670 transitions. Second operand has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:37:38,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:37:38,132 INFO L93 Difference]: Finished difference Result 699 states and 788 transitions. [2022-11-22 02:37:38,133 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 82 states. [2022-11-22 02:37:38,133 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-22 02:37:38,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:37:38,135 INFO L225 Difference]: With dead ends: 699 [2022-11-22 02:37:38,135 INFO L226 Difference]: Without dead ends: 699 [2022-11-22 02:37:38,136 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 250 GetRequests, 103 SyntacticMatches, 1 SemanticMatches, 146 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 6001 ImplicationChecksByTransitivity, 33.3s TimeCoverageRelationStatistics Valid=3326, Invalid=18139, Unknown=1, NotChecked=290, Total=21756 [2022-11-22 02:37:38,136 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 1664 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 1644 mSolverCounterSat, 99 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1664 SdHoareTripleChecker+Valid, 77 SdHoareTripleChecker+Invalid, 1839 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 1644 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 96 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-11-22 02:37:38,137 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1664 Valid, 77 Invalid, 1839 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [99 Valid, 1644 Invalid, 0 Unknown, 96 Unchecked, 3.8s Time] [2022-11-22 02:37:38,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 699 states. [2022-11-22 02:37:38,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 699 to 564. [2022-11-22 02:37:38,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1800356506238858) internal successors, (662), 563 states have internal predecessors, (662), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:37:38,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 662 transitions. [2022-11-22 02:37:38,147 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 662 transitions. Word has length 53 [2022-11-22 02:37:38,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:37:38,148 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 662 transitions. [2022-11-22 02:37:38,148 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:37:38,148 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 662 transitions. [2022-11-22 02:37:38,149 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-22 02:37:38,149 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:37:38,149 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:37:38,159 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-22 02:37:38,355 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-11-22 02:37:38,356 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:37:38,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:37:38,356 INFO L85 PathProgramCache]: Analyzing trace with hash -563151082, now seen corresponding path program 8 times [2022-11-22 02:37:38,356 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:37:38,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1554791214] [2022-11-22 02:37:38,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:37:38,356 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:37:38,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:37:38,905 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:37:38,905 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:37:38,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1554791214] [2022-11-22 02:37:38,905 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1554791214] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:37:38,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [452042851] [2022-11-22 02:37:38,905 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:37:38,905 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:37:38,905 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:37:38,906 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:37:38,908 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-22 02:37:39,213 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-22 02:37:39,214 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:37:39,217 INFO L263 TraceCheckSpWp]: Trace formula consists of 386 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-22 02:37:39,218 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:37:39,560 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:37:39,561 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:37:39,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-22 02:37:40,049 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:37:40,049 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [452042851] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:37:40,049 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2122709294] [2022-11-22 02:37:40,050 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:37:40,050 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:37:40,050 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:37:40,051 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:37:40,051 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:37:40,084 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:37:40,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:37:40,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:40,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:40,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:40,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:40,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:40,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:40,308 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:37:40,308 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:37:40,712 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:37:43,527 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29176#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:37:43,527 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:37:43,527 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:37:43,528 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 37 [2022-11-22 02:37:43,528 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1232508863] [2022-11-22 02:37:43,528 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:37:43,528 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-11-22 02:37:43,528 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:37:43,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-11-22 02:37:43,529 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=303, Invalid=2349, Unknown=0, NotChecked=0, Total=2652 [2022-11-22 02:37:43,529 INFO L87 Difference]: Start difference. First operand 564 states and 662 transitions. Second operand has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:37:44,533 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:37:44,534 INFO L93 Difference]: Finished difference Result 738 states and 843 transitions. [2022-11-22 02:37:44,534 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-22 02:37:44,534 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-22 02:37:44,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:37:44,537 INFO L225 Difference]: With dead ends: 738 [2022-11-22 02:37:44,537 INFO L226 Difference]: Without dead ends: 738 [2022-11-22 02:37:44,537 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 115 SyntacticMatches, 6 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1411 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=606, Invalid=3554, Unknown=0, NotChecked=0, Total=4160 [2022-11-22 02:37:44,538 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 591 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 950 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 591 SdHoareTripleChecker+Valid, 321 SdHoareTripleChecker+Invalid, 969 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 950 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 02:37:44,538 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [591 Valid, 321 Invalid, 969 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 950 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-22 02:37:44,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 738 states. [2022-11-22 02:37:44,546 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 738 to 586. [2022-11-22 02:37:44,547 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 586 states, 583 states have (on average 1.1886792452830188) internal successors, (693), 585 states have internal predecessors, (693), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:37:44,548 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 586 states to 586 states and 693 transitions. [2022-11-22 02:37:44,548 INFO L78 Accepts]: Start accepts. Automaton has 586 states and 693 transitions. Word has length 53 [2022-11-22 02:37:44,548 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:37:44,549 INFO L495 AbstractCegarLoop]: Abstraction has 586 states and 693 transitions. [2022-11-22 02:37:44,549 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:37:44,549 INFO L276 IsEmpty]: Start isEmpty. Operand 586 states and 693 transitions. [2022-11-22 02:37:44,550 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-22 02:37:44,550 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:37:44,550 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:37:44,563 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-22 02:37:44,756 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable47,31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:37:44,757 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:37:44,757 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:37:44,757 INFO L85 PathProgramCache]: Analyzing trace with hash 1154445308, now seen corresponding path program 9 times [2022-11-22 02:37:44,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:37:44,757 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1097464550] [2022-11-22 02:37:44,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:37:44,757 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:37:44,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:37:45,206 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 4 proven. 76 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:37:45,206 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:37:45,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1097464550] [2022-11-22 02:37:45,206 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1097464550] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:37:45,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [387708683] [2022-11-22 02:37:45,206 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:37:45,207 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:37:45,207 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:37:45,207 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:37:45,210 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-22 02:37:45,434 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:37:45,434 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:37:45,437 INFO L263 TraceCheckSpWp]: Trace formula consists of 372 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-22 02:37:45,438 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:37:45,737 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:37:45,737 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:37:46,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-22 02:37:46,177 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 02:37:46,177 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [387708683] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:37:46,177 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [972496586] [2022-11-22 02:37:46,178 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:37:46,178 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:37:46,178 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:37:46,179 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:37:46,179 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:37:46,197 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:37:46,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:37:46,232 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:46,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:46,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:46,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:46,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:46,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:37:46,415 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:37:46,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:37:47,598 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:37:50,470 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '30894#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:37:50,470 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:37:50,470 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:37:50,470 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 28 [2022-11-22 02:37:50,470 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [158835400] [2022-11-22 02:37:50,470 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:37:50,471 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-22 02:37:50,471 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:37:50,471 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-22 02:37:50,471 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1862, Unknown=0, NotChecked=0, Total=2070 [2022-11-22 02:37:50,472 INFO L87 Difference]: Start difference. First operand 586 states and 693 transitions. Second operand has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:37:51,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:37:51,567 INFO L93 Difference]: Finished difference Result 672 states and 767 transitions. [2022-11-22 02:37:51,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-22 02:37:51,568 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-11-22 02:37:51,568 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:37:51,571 INFO L225 Difference]: With dead ends: 672 [2022-11-22 02:37:51,571 INFO L226 Difference]: Without dead ends: 672 [2022-11-22 02:37:51,572 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 126 SyntacticMatches, 5 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1132 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=615, Invalid=3545, Unknown=0, NotChecked=0, Total=4160 [2022-11-22 02:37:51,572 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 1025 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 719 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1025 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 736 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 719 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-22 02:37:51,572 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1025 Valid, 115 Invalid, 736 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 719 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-22 02:37:51,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 672 states. [2022-11-22 02:37:51,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 672 to 586. [2022-11-22 02:37:51,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 586 states, 583 states have (on average 1.1818181818181819) internal successors, (689), 585 states have internal predecessors, (689), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:37:51,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 586 states to 586 states and 689 transitions. [2022-11-22 02:37:51,581 INFO L78 Accepts]: Start accepts. Automaton has 586 states and 689 transitions. Word has length 55 [2022-11-22 02:37:51,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:37:51,581 INFO L495 AbstractCegarLoop]: Abstraction has 586 states and 689 transitions. [2022-11-22 02:37:51,581 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:37:51,581 INFO L276 IsEmpty]: Start isEmpty. Operand 586 states and 689 transitions. [2022-11-22 02:37:51,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-22 02:37:51,582 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:37:51,583 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:37:51,588 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-22 02:37:51,787 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-22 02:37:51,787 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:37:51,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:37:51,788 INFO L85 PathProgramCache]: Analyzing trace with hash -690235405, now seen corresponding path program 5 times [2022-11-22 02:37:51,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:37:51,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1058129347] [2022-11-22 02:37:51,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:37:51,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:37:51,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:37:52,187 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 9 proven. 86 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:37:52,187 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:37:52,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1058129347] [2022-11-22 02:37:52,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1058129347] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:37:52,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1395644284] [2022-11-22 02:37:52,188 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:37:52,188 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:37:52,188 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:37:52,191 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:37:52,219 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-22 02:37:52,519 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-22 02:37:52,520 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:37:52,523 INFO L263 TraceCheckSpWp]: Trace formula consists of 400 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-22 02:37:52,525 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:37:52,542 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 02:37:52,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 02:37:53,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 02:38:01,967 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:38:01,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 35 treesize of output 17 [2022-11-22 02:38:02,015 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 65 proven. 30 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:38:02,015 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:38:02,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 02:38:02,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-22 02:38:03,570 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 60 proven. 35 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:38:03,570 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1395644284] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:38:03,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1541039183] [2022-11-22 02:38:03,571 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-22 02:38:03,571 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:38:03,571 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:38:03,571 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:38:03,571 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:38:03,597 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:38:03,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:38:03,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:38:03,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:38:03,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:38:03,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:38:03,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:38:03,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:38:03,893 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:38:03,931 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:38:03,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:38:04,095 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:38:10,109 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '32585#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:38:10,109 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:38:10,109 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:38:10,109 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 18, 18] total 48 [2022-11-22 02:38:10,109 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [360749833] [2022-11-22 02:38:10,109 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:38:10,109 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-22 02:38:10,110 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:38:10,110 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-22 02:38:10,110 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=310, Invalid=3593, Unknown=3, NotChecked=0, Total=3906 [2022-11-22 02:38:10,111 INFO L87 Difference]: Start difference. First operand 586 states and 689 transitions. Second operand has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:39:14,389 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.48s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-22 02:39:14,444 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:39:14,445 INFO L93 Difference]: Finished difference Result 1854 states and 2065 transitions. [2022-11-22 02:39:14,445 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 131 states. [2022-11-22 02:39:14,445 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-11-22 02:39:14,445 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:39:14,449 INFO L225 Difference]: With dead ends: 1854 [2022-11-22 02:39:14,449 INFO L226 Difference]: Without dead ends: 1836 [2022-11-22 02:39:14,451 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 309 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 190 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10827 ImplicationChecksByTransitivity, 74.0s TimeCoverageRelationStatistics Valid=6074, Invalid=30593, Unknown=5, NotChecked=0, Total=36672 [2022-11-22 02:39:14,451 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 1507 mSDsluCounter, 641 mSDsCounter, 0 mSdLazyCounter, 3303 mSolverCounterSat, 27 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1507 SdHoareTripleChecker+Valid, 669 SdHoareTripleChecker+Invalid, 3331 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 3303 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.7s IncrementalHoareTripleChecker+Time [2022-11-22 02:39:14,452 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1507 Valid, 669 Invalid, 3331 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 3303 Invalid, 1 Unknown, 0 Unchecked, 5.7s Time] [2022-11-22 02:39:14,453 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1836 states. [2022-11-22 02:39:14,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1836 to 741. [2022-11-22 02:39:14,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 741 states, 738 states have (on average 1.1856368563685638) internal successors, (875), 740 states have internal predecessors, (875), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:39:14,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 741 states to 741 states and 875 transitions. [2022-11-22 02:39:14,468 INFO L78 Accepts]: Start accepts. Automaton has 741 states and 875 transitions. Word has length 56 [2022-11-22 02:39:14,469 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:39:14,469 INFO L495 AbstractCegarLoop]: Abstraction has 741 states and 875 transitions. [2022-11-22 02:39:14,469 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:39:14,469 INFO L276 IsEmpty]: Start isEmpty. Operand 741 states and 875 transitions. [2022-11-22 02:39:14,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-22 02:39:14,470 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:39:14,471 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:39:14,479 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Ended with exit code 0 [2022-11-22 02:39:14,679 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-22 02:39:14,679 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:39:14,680 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:39:14,680 INFO L85 PathProgramCache]: Analyzing trace with hash 316753893, now seen corresponding path program 10 times [2022-11-22 02:39:14,680 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:39:14,680 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [886766948] [2022-11-22 02:39:14,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:39:14,680 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:39:14,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:39:16,142 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 93 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:39:16,143 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:39:16,143 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [886766948] [2022-11-22 02:39:16,143 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [886766948] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:39:16,143 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2104497572] [2022-11-22 02:39:16,143 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:39:16,143 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:39:16,143 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:39:16,144 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:39:16,146 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-22 02:39:16,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:39:16,348 INFO L263 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-22 02:39:16,351 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:39:16,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:39:16,730 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:39:16,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:39:17,188 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-11-22 02:39:17,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-11-22 02:39:17,193 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 68 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:39:17,193 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:39:17,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-22 02:39:17,735 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 68 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:39:17,735 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2104497572] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:39:17,735 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2023544324] [2022-11-22 02:39:17,736 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-22 02:39:17,736 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:39:17,736 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:39:17,736 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:39:17,736 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:39:17,757 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:39:17,758 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:39:17,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:39:17,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:39:17,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:39:17,906 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:39:17,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-22 02:39:18,000 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:39:18,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:39:18,077 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-22 02:39:18,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-22 02:39:18,580 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:39:22,806 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '35839#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-22 02:39:22,807 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:39:22,807 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:39:22,807 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 19, 19] total 44 [2022-11-22 02:39:22,807 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [436638652] [2022-11-22 02:39:22,807 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:39:22,807 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-11-22 02:39:22,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:39:22,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-11-22 02:39:22,808 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=236, Invalid=3424, Unknown=0, NotChecked=0, Total=3660 [2022-11-22 02:39:22,808 INFO L87 Difference]: Start difference. First operand 741 states and 875 transitions. Second operand has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:39:36,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:39:36,892 INFO L93 Difference]: Finished difference Result 1417 states and 1644 transitions. [2022-11-22 02:39:36,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 71 states. [2022-11-22 02:39:36,892 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-11-22 02:39:36,892 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:39:36,896 INFO L225 Difference]: With dead ends: 1417 [2022-11-22 02:39:36,896 INFO L226 Difference]: Without dead ends: 1417 [2022-11-22 02:39:36,897 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 137 SyntacticMatches, 4 SemanticMatches, 122 ConstructedPredicates, 0 IntricatePredicates, 2 DeprecatedPredicates, 3971 ImplicationChecksByTransitivity, 13.7s TimeCoverageRelationStatistics Valid=1402, Invalid=13850, Unknown=0, NotChecked=0, Total=15252 [2022-11-22 02:39:36,897 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 1436 mSDsluCounter, 888 mSDsCounter, 0 mSdLazyCounter, 3899 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1436 SdHoareTripleChecker+Valid, 937 SdHoareTripleChecker+Invalid, 3926 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 3899 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-11-22 02:39:36,898 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1436 Valid, 937 Invalid, 3926 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 3899 Invalid, 0 Unknown, 0 Unchecked, 6.1s Time] [2022-11-22 02:39:36,899 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1417 states. [2022-11-22 02:39:36,910 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1417 to 817. [2022-11-22 02:39:36,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 817 states, 814 states have (on average 1.1805896805896805) internal successors, (961), 816 states have internal predecessors, (961), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:39:36,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 817 states to 817 states and 961 transitions. [2022-11-22 02:39:36,912 INFO L78 Accepts]: Start accepts. Automaton has 817 states and 961 transitions. Word has length 58 [2022-11-22 02:39:36,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:39:36,912 INFO L495 AbstractCegarLoop]: Abstraction has 817 states and 961 transitions. [2022-11-22 02:39:36,913 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:39:36,913 INFO L276 IsEmpty]: Start isEmpty. Operand 817 states and 961 transitions. [2022-11-22 02:39:36,914 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-22 02:39:36,914 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:39:36,914 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 02:39:36,923 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-22 02:39:37,120 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:39:37,120 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-22 02:39:37,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:39:37,121 INFO L85 PathProgramCache]: Analyzing trace with hash -175738785, now seen corresponding path program 11 times [2022-11-22 02:39:37,121 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:39:37,121 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [493700844] [2022-11-22 02:39:37,121 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:39:37,121 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:39:37,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:39:37,562 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 9 proven. 88 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-22 02:39:37,562 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:39:37,562 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [493700844] [2022-11-22 02:39:37,562 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [493700844] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:39:37,562 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1947154251] [2022-11-22 02:39:37,563 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:39:37,563 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:39:37,563 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:39:37,564 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:39:37,566 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1c436c46-73f9-42e3-94b6-3a41fdaff2b9/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-22 02:39:37,881 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 02:39:37,881 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:39:37,884 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 81 conjunts are in the unsatisfiable core [2022-11-22 02:39:37,888 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:39:37,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:39:38,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:39:38,131 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:40:40,409 INFO L321 Elim1Store]: treesize reduction 41, result has 83.8 percent of original size [2022-11-22 02:40:40,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 86 treesize of output 246 [2022-11-22 02:40:58,557 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 3 proven. 70 refuted. 12 times theorem prover too weak. 37 trivial. 0 not checked. [2022-11-22 02:40:58,557 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:41:04,320 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:41:04,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 184 treesize of output 96 [2022-11-22 02:41:04,548 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:41:04,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 285 treesize of output 455 [2022-11-22 02:41:04,793 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:41:04,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 190 treesize of output 280 [2022-11-22 02:41:04,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12