./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 4e7fbc69 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4cb6276eff0c60579b1d5f7034948eb4f53891709ff48cdd11b3329ec3c4cc2e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 16:01:32,130 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 16:01:32,132 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 16:01:32,153 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 16:01:32,158 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 16:01:32,163 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 16:01:32,166 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 16:01:32,169 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 16:01:32,171 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 16:01:32,177 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 16:01:32,178 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 16:01:32,180 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 16:01:32,180 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 16:01:32,183 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 16:01:32,184 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 16:01:32,185 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 16:01:32,185 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 16:01:32,186 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 16:01:32,188 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 16:01:32,189 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 16:01:32,191 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 16:01:32,192 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 16:01:32,193 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 16:01:32,194 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 16:01:32,197 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 16:01:32,197 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 16:01:32,198 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 16:01:32,199 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 16:01:32,199 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 16:01:32,200 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 16:01:32,201 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 16:01:32,201 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 16:01:32,202 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 16:01:32,203 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 16:01:32,204 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 16:01:32,204 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 16:01:32,205 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 16:01:32,205 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 16:01:32,206 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 16:01:32,207 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 16:01:32,207 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 16:01:32,208 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-23 16:01:32,229 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 16:01:32,229 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 16:01:32,230 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 16:01:32,230 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 16:01:32,231 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 16:01:32,231 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 16:01:32,231 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-23 16:01:32,231 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-23 16:01:32,232 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-23 16:01:32,232 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-23 16:01:32,232 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-23 16:01:32,233 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-23 16:01:32,233 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-23 16:01:32,233 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-23 16:01:32,233 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-23 16:01:32,234 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-23 16:01:32,234 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-23 16:01:32,234 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-23 16:01:32,235 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-23 16:01:32,235 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-23 16:01:32,236 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 16:01:32,236 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-23 16:01:32,236 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-23 16:01:32,236 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-23 16:01:32,237 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-23 16:01:32,237 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 16:01:32,237 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-23 16:01:32,237 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-23 16:01:32,237 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-23 16:01:32,238 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 16:01:32,238 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-23 16:01:32,238 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-23 16:01:32,238 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 16:01:32,238 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 16:01:32,239 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 16:01:32,239 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 16:01:32,239 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 16:01:32,239 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-23 16:01:32,239 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 16:01:32,240 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-23 16:01:32,240 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-23 16:01:32,240 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-23 16:01:32,240 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4cb6276eff0c60579b1d5f7034948eb4f53891709ff48cdd11b3329ec3c4cc2e [2022-11-23 16:01:32,492 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 16:01:32,515 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 16:01:32,519 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 16:01:32,520 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 16:01:32,520 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 16:01:32,522 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i [2022-11-23 16:01:35,675 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 16:01:35,974 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 16:01:35,975 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/sv-benchmarks/c/array-memsafety/substring-alloca-2.i [2022-11-23 16:01:35,988 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/data/19d6f6ded/dd840c8bc73841f1a23331aad3ee6ab9/FLAG1ff903e6e [2022-11-23 16:01:36,007 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/data/19d6f6ded/dd840c8bc73841f1a23331aad3ee6ab9 [2022-11-23 16:01:36,012 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 16:01:36,014 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 16:01:36,017 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 16:01:36,017 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 16:01:36,022 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 16:01:36,023 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,026 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@cec9b41 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36, skipping insertion in model container [2022-11-23 16:01:36,026 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,034 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 16:01:36,070 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 16:01:36,433 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 16:01:36,450 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 16:01:36,501 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 16:01:36,535 INFO L208 MainTranslator]: Completed translation [2022-11-23 16:01:36,535 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36 WrapperNode [2022-11-23 16:01:36,535 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 16:01:36,537 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 16:01:36,537 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 16:01:36,537 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 16:01:36,547 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,584 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,610 INFO L138 Inliner]: procedures = 117, calls = 18, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 103 [2022-11-23 16:01:36,611 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 16:01:36,612 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 16:01:36,613 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 16:01:36,613 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 16:01:36,622 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,622 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,631 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,632 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,638 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,645 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,647 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,654 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,656 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 16:01:36,667 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 16:01:36,670 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 16:01:36,670 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 16:01:36,671 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (1/1) ... [2022-11-23 16:01:36,678 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 16:01:36,695 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:01:36,706 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 16:01:36,724 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 16:01:36,750 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-23 16:01:36,750 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-23 16:01:36,750 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-23 16:01:36,751 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-23 16:01:36,751 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 16:01:36,751 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 16:01:36,920 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 16:01:36,922 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 16:01:37,265 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 16:01:37,354 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 16:01:37,355 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-23 16:01:37,357 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 04:01:37 BoogieIcfgContainer [2022-11-23 16:01:37,358 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 16:01:37,360 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 16:01:37,360 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 16:01:37,363 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 16:01:37,364 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 04:01:36" (1/3) ... [2022-11-23 16:01:37,365 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@185abedd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 04:01:37, skipping insertion in model container [2022-11-23 16:01:37,365 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:01:36" (2/3) ... [2022-11-23 16:01:37,365 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@185abedd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 04:01:37, skipping insertion in model container [2022-11-23 16:01:37,365 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 04:01:37" (3/3) ... [2022-11-23 16:01:37,367 INFO L112 eAbstractionObserver]: Analyzing ICFG substring-alloca-2.i [2022-11-23 16:01:37,386 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 16:01:37,387 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 19 error locations. [2022-11-23 16:01:37,432 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 16:01:37,440 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@8d95fbd, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 16:01:37,441 INFO L358 AbstractCegarLoop]: Starting to check reachability of 19 error locations. [2022-11-23 16:01:37,445 INFO L276 IsEmpty]: Start isEmpty. Operand has 39 states, 19 states have (on average 2.4210526315789473) internal successors, (46), 38 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:37,451 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-23 16:01:37,451 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:37,452 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-23 16:01:37,452 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:37,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:37,461 INFO L85 PathProgramCache]: Analyzing trace with hash 158342, now seen corresponding path program 1 times [2022-11-23 16:01:37,472 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:37,472 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [255438805] [2022-11-23 16:01:37,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:37,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:37,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:37,904 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:37,904 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:37,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [255438805] [2022-11-23 16:01:37,906 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [255438805] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:37,906 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:37,906 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-23 16:01:37,908 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1887745817] [2022-11-23 16:01:37,909 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:37,913 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 16:01:37,914 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:37,947 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 16:01:37,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 16:01:37,950 INFO L87 Difference]: Start difference. First operand has 39 states, 19 states have (on average 2.4210526315789473) internal successors, (46), 38 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:38,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:38,087 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-11-23 16:01:38,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 16:01:38,092 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-23 16:01:38,093 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:38,100 INFO L225 Difference]: With dead ends: 37 [2022-11-23 16:01:38,100 INFO L226 Difference]: Without dead ends: 36 [2022-11-23 16:01:38,102 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 16:01:38,109 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:38,112 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 19 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 16:01:38,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-23 16:01:38,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-23 16:01:38,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:38,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-23 16:01:38,173 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 3 [2022-11-23 16:01:38,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:38,173 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-23 16:01:38,174 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:38,174 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-23 16:01:38,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-23 16:01:38,174 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:38,174 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-23 16:01:38,175 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-23 16:01:38,175 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:38,175 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:38,175 INFO L85 PathProgramCache]: Analyzing trace with hash 158343, now seen corresponding path program 1 times [2022-11-23 16:01:38,176 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:38,176 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1648605703] [2022-11-23 16:01:38,176 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:38,176 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:38,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:38,482 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:38,482 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:38,482 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1648605703] [2022-11-23 16:01:38,483 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1648605703] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:38,483 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:38,483 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 16:01:38,483 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1516172144] [2022-11-23 16:01:38,484 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:38,486 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 16:01:38,488 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:38,489 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 16:01:38,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 16:01:38,490 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:38,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:38,661 INFO L93 Difference]: Finished difference Result 70 states and 80 transitions. [2022-11-23 16:01:38,662 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 16:01:38,662 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-23 16:01:38,662 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:38,663 INFO L225 Difference]: With dead ends: 70 [2022-11-23 16:01:38,663 INFO L226 Difference]: Without dead ends: 70 [2022-11-23 16:01:38,664 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-23 16:01:38,665 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 38 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:38,666 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 58 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 16:01:38,667 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-23 16:01:38,670 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 38. [2022-11-23 16:01:38,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 21 states have (on average 2.0952380952380953) internal successors, (44), 37 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:38,672 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 44 transitions. [2022-11-23 16:01:38,672 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 44 transitions. Word has length 3 [2022-11-23 16:01:38,672 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:38,672 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 44 transitions. [2022-11-23 16:01:38,673 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:38,673 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 44 transitions. [2022-11-23 16:01:38,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-23 16:01:38,673 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:38,674 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-23 16:01:38,680 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-23 16:01:38,680 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:38,682 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:38,682 INFO L85 PathProgramCache]: Analyzing trace with hash 5013776, now seen corresponding path program 1 times [2022-11-23 16:01:38,682 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:38,683 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [631934887] [2022-11-23 16:01:38,683 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:38,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:38,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:39,019 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:39,020 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:39,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [631934887] [2022-11-23 16:01:39,020 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [631934887] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:39,020 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:39,021 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 16:01:39,021 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1471433348] [2022-11-23 16:01:39,021 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:39,022 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 16:01:39,022 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:39,022 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 16:01:39,023 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-23 16:01:39,023 INFO L87 Difference]: Start difference. First operand 38 states and 44 transitions. Second operand has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:39,066 INFO L93 Difference]: Finished difference Result 37 states and 43 transitions. [2022-11-23 16:01:39,066 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 16:01:39,066 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-23 16:01:39,067 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:39,067 INFO L225 Difference]: With dead ends: 37 [2022-11-23 16:01:39,067 INFO L226 Difference]: Without dead ends: 37 [2022-11-23 16:01:39,068 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-23 16:01:39,069 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 39 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:39,070 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 19 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 16:01:39,071 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-23 16:01:39,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 37. [2022-11-23 16:01:39,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-23 16:01:39,074 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 4 [2022-11-23 16:01:39,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:39,075 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-23 16:01:39,075 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,075 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-23 16:01:39,075 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-23 16:01:39,076 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:39,076 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-23 16:01:39,076 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-23 16:01:39,076 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:39,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:39,077 INFO L85 PathProgramCache]: Analyzing trace with hash 5011007, now seen corresponding path program 1 times [2022-11-23 16:01:39,077 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:39,078 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1453500870] [2022-11-23 16:01:39,078 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:39,078 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:39,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:39,121 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:39,122 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:39,122 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1453500870] [2022-11-23 16:01:39,122 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1453500870] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:39,123 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:39,123 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-23 16:01:39,123 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1096182490] [2022-11-23 16:01:39,123 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:39,124 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 16:01:39,124 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:39,124 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 16:01:39,124 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 16:01:39,125 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:39,158 INFO L93 Difference]: Finished difference Result 35 states and 41 transitions. [2022-11-23 16:01:39,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 16:01:39,159 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-23 16:01:39,159 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:39,159 INFO L225 Difference]: With dead ends: 35 [2022-11-23 16:01:39,160 INFO L226 Difference]: Without dead ends: 35 [2022-11-23 16:01:39,160 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 16:01:39,161 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 33 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:39,162 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 18 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 16:01:39,163 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-11-23 16:01:39,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 35. [2022-11-23 16:01:39,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,190 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-11-23 16:01:39,190 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 4 [2022-11-23 16:01:39,191 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:39,191 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-11-23 16:01:39,191 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,191 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-11-23 16:01:39,191 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-23 16:01:39,192 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:39,192 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-23 16:01:39,192 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-23 16:01:39,192 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:39,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:39,193 INFO L85 PathProgramCache]: Analyzing trace with hash 5011008, now seen corresponding path program 1 times [2022-11-23 16:01:39,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:39,193 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [324529422] [2022-11-23 16:01:39,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:39,194 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:39,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:39,406 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:39,406 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:39,406 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [324529422] [2022-11-23 16:01:39,407 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [324529422] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:39,407 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:39,407 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 16:01:39,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1904607795] [2022-11-23 16:01:39,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:39,409 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 16:01:39,410 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:39,411 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 16:01:39,411 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-23 16:01:39,411 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,544 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:39,544 INFO L93 Difference]: Finished difference Result 63 states and 73 transitions. [2022-11-23 16:01:39,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 16:01:39,545 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-23 16:01:39,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:39,548 INFO L225 Difference]: With dead ends: 63 [2022-11-23 16:01:39,549 INFO L226 Difference]: Without dead ends: 63 [2022-11-23 16:01:39,550 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-23 16:01:39,557 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 100 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:39,559 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [100 Valid, 51 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 16:01:39,561 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-11-23 16:01:39,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 37. [2022-11-23 16:01:39,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 23 states have (on average 1.9130434782608696) internal successors, (44), 36 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 44 transitions. [2022-11-23 16:01:39,564 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 44 transitions. Word has length 4 [2022-11-23 16:01:39,565 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:39,565 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 44 transitions. [2022-11-23 16:01:39,565 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,565 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 44 transitions. [2022-11-23 16:01:39,566 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-23 16:01:39,566 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:39,566 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-23 16:01:39,566 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-23 16:01:39,567 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:39,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:39,567 INFO L85 PathProgramCache]: Analyzing trace with hash 155427050, now seen corresponding path program 1 times [2022-11-23 16:01:39,568 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:39,568 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [599945636] [2022-11-23 16:01:39,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:39,568 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:39,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:39,858 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:39,859 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:39,859 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [599945636] [2022-11-23 16:01:39,859 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [599945636] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:39,859 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:39,860 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 16:01:39,860 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [574462198] [2022-11-23 16:01:39,860 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:39,861 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 16:01:39,861 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:39,861 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 16:01:39,862 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-23 16:01:39,862 INFO L87 Difference]: Start difference. First operand 37 states and 44 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:39,910 INFO L93 Difference]: Finished difference Result 36 states and 43 transitions. [2022-11-23 16:01:39,911 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 16:01:39,911 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-23 16:01:39,911 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:39,913 INFO L225 Difference]: With dead ends: 36 [2022-11-23 16:01:39,913 INFO L226 Difference]: Without dead ends: 36 [2022-11-23 16:01:39,914 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-23 16:01:39,920 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 70 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:39,922 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 17 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 16:01:39,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-23 16:01:39,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-23 16:01:39,933 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 23 states have (on average 1.8695652173913044) internal successors, (43), 35 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,933 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 43 transitions. [2022-11-23 16:01:39,934 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 43 transitions. Word has length 5 [2022-11-23 16:01:39,934 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:39,935 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 43 transitions. [2022-11-23 16:01:39,935 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:39,935 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 43 transitions. [2022-11-23 16:01:39,935 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-23 16:01:39,936 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:39,936 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1] [2022-11-23 16:01:39,936 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-23 16:01:39,937 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:39,937 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:39,938 INFO L85 PathProgramCache]: Analyzing trace with hash 152263501, now seen corresponding path program 1 times [2022-11-23 16:01:39,938 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:39,938 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [689366367] [2022-11-23 16:01:39,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:39,938 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:39,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:40,242 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:40,243 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:40,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [689366367] [2022-11-23 16:01:40,243 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [689366367] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:01:40,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [763756869] [2022-11-23 16:01:40,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:40,244 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:01:40,244 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:01:40,251 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:01:40,274 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-23 16:01:40,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:40,340 INFO L263 TraceCheckSpWp]: Trace formula consists of 67 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-23 16:01:40,345 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:01:40,447 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:01:40,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-23 16:01:40,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-23 16:01:40,669 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:40,670 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:01:40,811 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:40,812 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [763756869] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:01:40,812 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1522231037] [2022-11-23 16:01:40,830 INFO L159 IcfgInterpreter]: Started Sifa with 4 locations of interest [2022-11-23 16:01:40,831 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:01:40,835 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:01:40,841 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:01:40,842 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:01:40,900 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:01:40,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:01:40,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:01:41,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:41,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:41,204 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:01:41,602 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '602#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |#NULL.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:01:41,602 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:01:41,602 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:01:41,602 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [3, 3, 3] total 9 [2022-11-23 16:01:41,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1978340365] [2022-11-23 16:01:41,603 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:01:41,603 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-23 16:01:41,603 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:41,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-23 16:01:41,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-11-23 16:01:41,604 INFO L87 Difference]: Start difference. First operand 36 states and 43 transitions. Second operand has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:41,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:41,983 INFO L93 Difference]: Finished difference Result 96 states and 114 transitions. [2022-11-23 16:01:41,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 16:01:41,984 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-23 16:01:41,984 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:41,985 INFO L225 Difference]: With dead ends: 96 [2022-11-23 16:01:41,985 INFO L226 Difference]: Without dead ends: 96 [2022-11-23 16:01:41,985 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=70, Invalid=202, Unknown=0, NotChecked=0, Total=272 [2022-11-23 16:01:41,986 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 201 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 229 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 234 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 229 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:41,986 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [201 Valid, 221 Invalid, 234 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 229 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 16:01:41,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2022-11-23 16:01:41,989 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 33. [2022-11-23 16:01:41,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 21 states have (on average 1.8571428571428572) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:41,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-11-23 16:01:41,990 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 5 [2022-11-23 16:01:41,990 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:41,990 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-11-23 16:01:41,990 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:41,991 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-11-23 16:01:41,991 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-23 16:01:41,991 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:41,991 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-23 16:01:42,002 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-23 16:01:42,196 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-11-23 16:01:42,197 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:42,197 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:42,197 INFO L85 PathProgramCache]: Analyzing trace with hash 523273240, now seen corresponding path program 1 times [2022-11-23 16:01:42,197 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:42,198 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1180985462] [2022-11-23 16:01:42,198 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:42,198 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:42,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:42,302 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:42,302 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:42,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1180985462] [2022-11-23 16:01:42,303 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1180985462] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:42,303 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:42,303 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 16:01:42,303 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1720122516] [2022-11-23 16:01:42,304 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:42,305 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 16:01:42,305 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:42,305 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 16:01:42,305 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-23 16:01:42,306 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:42,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:42,375 INFO L93 Difference]: Finished difference Result 55 states and 64 transitions. [2022-11-23 16:01:42,375 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 16:01:42,376 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-23 16:01:42,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:42,376 INFO L225 Difference]: With dead ends: 55 [2022-11-23 16:01:42,376 INFO L226 Difference]: Without dead ends: 55 [2022-11-23 16:01:42,377 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-23 16:01:42,378 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 84 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:42,379 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 30 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 16:01:42,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-23 16:01:42,391 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 34. [2022-11-23 16:01:42,392 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 33 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:42,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 41 transitions. [2022-11-23 16:01:42,394 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 41 transitions. Word has length 6 [2022-11-23 16:01:42,394 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:42,394 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 41 transitions. [2022-11-23 16:01:42,395 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:42,395 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 41 transitions. [2022-11-23 16:01:42,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-23 16:01:42,395 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:42,395 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-23 16:01:42,396 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-23 16:01:42,396 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:42,396 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:42,396 INFO L85 PathProgramCache]: Analyzing trace with hash 523273239, now seen corresponding path program 1 times [2022-11-23 16:01:42,397 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:42,397 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2058739070] [2022-11-23 16:01:42,397 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:42,397 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:42,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:42,457 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:42,457 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:42,458 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2058739070] [2022-11-23 16:01:42,458 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2058739070] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:42,458 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:42,458 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 16:01:42,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [709333892] [2022-11-23 16:01:42,459 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:42,459 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 16:01:42,459 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:42,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 16:01:42,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 16:01:42,460 INFO L87 Difference]: Start difference. First operand 34 states and 41 transitions. Second operand has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:42,499 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:42,500 INFO L93 Difference]: Finished difference Result 33 states and 39 transitions. [2022-11-23 16:01:42,500 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 16:01:42,500 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-23 16:01:42,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:42,501 INFO L225 Difference]: With dead ends: 33 [2022-11-23 16:01:42,501 INFO L226 Difference]: Without dead ends: 33 [2022-11-23 16:01:42,502 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-23 16:01:42,504 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 53 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:42,504 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 18 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 16:01:42,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-11-23 16:01:42,509 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 33. [2022-11-23 16:01:42,509 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:42,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-11-23 16:01:42,510 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 6 [2022-11-23 16:01:42,510 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:42,510 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-11-23 16:01:42,510 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:42,511 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-11-23 16:01:42,511 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-23 16:01:42,511 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:42,511 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-23 16:01:42,511 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-23 16:01:42,512 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:42,512 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:42,512 INFO L85 PathProgramCache]: Analyzing trace with hash 520684782, now seen corresponding path program 1 times [2022-11-23 16:01:42,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:42,513 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [514370452] [2022-11-23 16:01:42,513 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:42,513 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:42,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:42,766 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:42,766 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:42,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [514370452] [2022-11-23 16:01:42,767 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [514370452] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:01:42,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1762811798] [2022-11-23 16:01:42,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:42,767 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:01:42,768 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:01:42,769 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:01:42,798 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-23 16:01:42,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:42,850 INFO L263 TraceCheckSpWp]: Trace formula consists of 70 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-23 16:01:42,851 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:01:42,899 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-23 16:01:42,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-23 16:01:43,095 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:43,096 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:01:43,258 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:43,259 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1762811798] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:01:43,259 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1267763745] [2022-11-23 16:01:43,267 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-23 16:01:43,267 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:01:43,267 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:01:43,267 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:01:43,268 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:01:43,297 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:01:43,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:01:43,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:01:43,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:43,464 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:43,500 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:01:44,056 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '952#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet18#1|)) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_main_#t~nondet18#1| 127) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:01:44,056 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:01:44,056 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:01:44,056 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2022-11-23 16:01:44,056 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1438146721] [2022-11-23 16:01:44,056 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:01:44,057 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-23 16:01:44,057 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:44,057 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-23 16:01:44,057 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=238, Unknown=0, NotChecked=0, Total=306 [2022-11-23 16:01:44,058 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:44,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:44,388 INFO L93 Difference]: Finished difference Result 83 states and 96 transitions. [2022-11-23 16:01:44,389 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-23 16:01:44,389 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-23 16:01:44,389 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:44,390 INFO L225 Difference]: With dead ends: 83 [2022-11-23 16:01:44,390 INFO L226 Difference]: Without dead ends: 83 [2022-11-23 16:01:44,390 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=103, Invalid=317, Unknown=0, NotChecked=0, Total=420 [2022-11-23 16:01:44,391 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 268 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 268 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 183 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:44,391 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [268 Valid, 172 Invalid, 183 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 16:01:44,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-11-23 16:01:44,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 30. [2022-11-23 16:01:44,393 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 20 states have (on average 1.75) internal successors, (35), 29 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:44,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 35 transitions. [2022-11-23 16:01:44,393 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 35 transitions. Word has length 6 [2022-11-23 16:01:44,394 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:44,394 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 35 transitions. [2022-11-23 16:01:44,394 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:44,394 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 35 transitions. [2022-11-23 16:01:44,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-23 16:01:44,394 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:44,395 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:44,402 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-23 16:01:44,601 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-23 16:01:44,601 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:44,601 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:44,601 INFO L85 PathProgramCache]: Analyzing trace with hash 354410300, now seen corresponding path program 1 times [2022-11-23 16:01:44,602 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:44,602 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [606378996] [2022-11-23 16:01:44,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:44,602 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:44,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:44,678 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:44,678 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:44,679 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [606378996] [2022-11-23 16:01:44,679 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [606378996] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:44,679 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:44,679 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 16:01:44,679 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [698973027] [2022-11-23 16:01:44,680 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:44,680 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 16:01:44,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:44,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 16:01:44,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 16:01:44,681 INFO L87 Difference]: Start difference. First operand 30 states and 35 transitions. Second operand has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:44,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:44,727 INFO L93 Difference]: Finished difference Result 30 states and 36 transitions. [2022-11-23 16:01:44,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 16:01:44,728 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-23 16:01:44,728 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:44,729 INFO L225 Difference]: With dead ends: 30 [2022-11-23 16:01:44,729 INFO L226 Difference]: Without dead ends: 30 [2022-11-23 16:01:44,729 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-23 16:01:44,730 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 37 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 21 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:44,730 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 21 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 16:01:44,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2022-11-23 16:01:44,731 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 27. [2022-11-23 16:01:44,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 20 states have (on average 1.6) internal successors, (32), 26 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:44,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 32 transitions. [2022-11-23 16:01:44,732 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 32 transitions. Word has length 8 [2022-11-23 16:01:44,732 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:44,732 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 32 transitions. [2022-11-23 16:01:44,733 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:44,733 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 32 transitions. [2022-11-23 16:01:44,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-23 16:01:44,733 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:44,733 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:44,734 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-23 16:01:44,734 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:44,734 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:44,735 INFO L85 PathProgramCache]: Analyzing trace with hash 354410301, now seen corresponding path program 1 times [2022-11-23 16:01:44,735 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:44,735 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1567181796] [2022-11-23 16:01:44,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:44,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:44,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:44,864 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:44,864 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:44,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1567181796] [2022-11-23 16:01:44,864 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1567181796] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:44,865 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:44,865 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 16:01:44,865 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1595589110] [2022-11-23 16:01:44,865 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:44,865 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 16:01:44,866 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:44,866 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 16:01:44,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 16:01:44,866 INFO L87 Difference]: Start difference. First operand 27 states and 32 transitions. Second operand has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:44,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:44,939 INFO L93 Difference]: Finished difference Result 43 states and 51 transitions. [2022-11-23 16:01:44,939 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 16:01:44,940 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-23 16:01:44,940 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:44,940 INFO L225 Difference]: With dead ends: 43 [2022-11-23 16:01:44,940 INFO L226 Difference]: Without dead ends: 43 [2022-11-23 16:01:44,941 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-23 16:01:44,941 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 91 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 31 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:44,942 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 31 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 16:01:44,942 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-23 16:01:44,948 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 33. [2022-11-23 16:01:44,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 26 states have (on average 1.6153846153846154) internal successors, (42), 32 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:44,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 42 transitions. [2022-11-23 16:01:44,949 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 42 transitions. Word has length 8 [2022-11-23 16:01:44,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:44,950 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 42 transitions. [2022-11-23 16:01:44,950 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:44,950 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 42 transitions. [2022-11-23 16:01:44,951 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-23 16:01:44,951 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:44,951 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:44,951 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-23 16:01:44,954 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:44,954 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:44,955 INFO L85 PathProgramCache]: Analyzing trace with hash 1285859555, now seen corresponding path program 1 times [2022-11-23 16:01:44,955 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:44,955 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1201513148] [2022-11-23 16:01:44,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:44,955 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:44,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:45,169 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:45,169 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:45,169 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1201513148] [2022-11-23 16:01:45,170 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1201513148] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:45,170 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:45,170 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 16:01:45,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [12912985] [2022-11-23 16:01:45,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:45,171 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 16:01:45,171 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:45,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 16:01:45,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 16:01:45,172 INFO L87 Difference]: Start difference. First operand 33 states and 42 transitions. Second operand has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:45,200 INFO L93 Difference]: Finished difference Result 32 states and 41 transitions. [2022-11-23 16:01:45,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 16:01:45,201 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-23 16:01:45,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:45,202 INFO L225 Difference]: With dead ends: 32 [2022-11-23 16:01:45,202 INFO L226 Difference]: Without dead ends: 29 [2022-11-23 16:01:45,202 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 16:01:45,203 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 21 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:45,204 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 32 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 16:01:45,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-23 16:01:45,207 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-23 16:01:45,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 23 states have (on average 1.608695652173913) internal successors, (37), 28 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 37 transitions. [2022-11-23 16:01:45,208 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 37 transitions. Word has length 10 [2022-11-23 16:01:45,208 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:45,208 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 37 transitions. [2022-11-23 16:01:45,208 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,209 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 37 transitions. [2022-11-23 16:01:45,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-23 16:01:45,209 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:45,209 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:45,209 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-11-23 16:01:45,210 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr14REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:45,210 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:45,210 INFO L85 PathProgramCache]: Analyzing trace with hash 1209053803, now seen corresponding path program 1 times [2022-11-23 16:01:45,211 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:45,211 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [805510916] [2022-11-23 16:01:45,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:45,211 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:45,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:45,258 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:45,258 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:45,259 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [805510916] [2022-11-23 16:01:45,259 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [805510916] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:45,259 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:45,259 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 16:01:45,261 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [838962506] [2022-11-23 16:01:45,262 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:45,262 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 16:01:45,262 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:45,262 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 16:01:45,263 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 16:01:45,263 INFO L87 Difference]: Start difference. First operand 29 states and 37 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:45,301 INFO L93 Difference]: Finished difference Result 29 states and 36 transitions. [2022-11-23 16:01:45,302 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 16:01:45,302 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-23 16:01:45,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:45,303 INFO L225 Difference]: With dead ends: 29 [2022-11-23 16:01:45,303 INFO L226 Difference]: Without dead ends: 29 [2022-11-23 16:01:45,303 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-23 16:01:45,304 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 25 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:45,305 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 14 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 16:01:45,305 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-23 16:01:45,306 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 28. [2022-11-23 16:01:45,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 23 states have (on average 1.5217391304347827) internal successors, (35), 27 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 35 transitions. [2022-11-23 16:01:45,309 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 35 transitions. Word has length 11 [2022-11-23 16:01:45,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:45,309 INFO L495 AbstractCegarLoop]: Abstraction has 28 states and 35 transitions. [2022-11-23 16:01:45,309 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,310 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 35 transitions. [2022-11-23 16:01:45,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-23 16:01:45,311 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:45,311 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:45,311 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-23 16:01:45,311 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:45,312 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:45,312 INFO L85 PathProgramCache]: Analyzing trace with hash 1209053804, now seen corresponding path program 1 times [2022-11-23 16:01:45,312 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:45,312 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [231860380] [2022-11-23 16:01:45,313 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:45,313 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:45,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:45,475 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:45,475 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:45,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [231860380] [2022-11-23 16:01:45,476 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [231860380] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:45,476 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:45,476 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-23 16:01:45,476 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [240237234] [2022-11-23 16:01:45,476 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:45,477 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 16:01:45,477 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:45,477 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 16:01:45,477 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-23 16:01:45,478 INFO L87 Difference]: Start difference. First operand 28 states and 35 transitions. Second operand has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:45,578 INFO L93 Difference]: Finished difference Result 50 states and 61 transitions. [2022-11-23 16:01:45,578 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 16:01:45,579 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-23 16:01:45,579 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:45,579 INFO L225 Difference]: With dead ends: 50 [2022-11-23 16:01:45,579 INFO L226 Difference]: Without dead ends: 50 [2022-11-23 16:01:45,580 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2022-11-23 16:01:45,580 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 79 mSDsluCounter, 11 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:45,581 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 17 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 16:01:45,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-23 16:01:45,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 33. [2022-11-23 16:01:45,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 28 states have (on average 1.4642857142857142) internal successors, (41), 32 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 41 transitions. [2022-11-23 16:01:45,582 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 41 transitions. Word has length 11 [2022-11-23 16:01:45,582 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:45,582 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 41 transitions. [2022-11-23 16:01:45,583 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,583 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 41 transitions. [2022-11-23 16:01:45,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-23 16:01:45,583 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:45,583 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:45,583 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-23 16:01:45,583 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:45,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:45,584 INFO L85 PathProgramCache]: Analyzing trace with hash 1209062877, now seen corresponding path program 1 times [2022-11-23 16:01:45,584 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:45,584 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [80004886] [2022-11-23 16:01:45,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:45,584 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:45,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:45,616 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:45,616 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:45,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [80004886] [2022-11-23 16:01:45,616 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [80004886] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:45,616 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:45,617 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 16:01:45,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1873060872] [2022-11-23 16:01:45,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:45,617 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 16:01:45,617 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:45,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 16:01:45,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 16:01:45,618 INFO L87 Difference]: Start difference. First operand 33 states and 41 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:45,636 INFO L93 Difference]: Finished difference Result 35 states and 43 transitions. [2022-11-23 16:01:45,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 16:01:45,637 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-23 16:01:45,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:45,637 INFO L225 Difference]: With dead ends: 35 [2022-11-23 16:01:45,637 INFO L226 Difference]: Without dead ends: 35 [2022-11-23 16:01:45,638 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 16:01:45,638 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 0 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:45,638 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 29 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 16:01:45,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-11-23 16:01:45,640 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 35. [2022-11-23 16:01:45,640 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 30 states have (on average 1.4333333333333333) internal successors, (43), 34 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 43 transitions. [2022-11-23 16:01:45,642 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 43 transitions. Word has length 11 [2022-11-23 16:01:45,642 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:45,642 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 43 transitions. [2022-11-23 16:01:45,642 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:45,642 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 43 transitions. [2022-11-23 16:01:45,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-23 16:01:45,643 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:45,643 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:45,644 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-11-23 16:01:45,644 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:45,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:45,644 INFO L85 PathProgramCache]: Analyzing trace with hash -2035392994, now seen corresponding path program 1 times [2022-11-23 16:01:45,644 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:45,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1939872661] [2022-11-23 16:01:45,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:45,645 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:45,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:46,042 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:46,042 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:46,042 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1939872661] [2022-11-23 16:01:46,043 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1939872661] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:46,043 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:46,043 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-23 16:01:46,043 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1357772587] [2022-11-23 16:01:46,043 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:46,044 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-23 16:01:46,044 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:46,045 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-23 16:01:46,045 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2022-11-23 16:01:46,045 INFO L87 Difference]: Start difference. First operand 35 states and 43 transitions. Second operand has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:46,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:46,475 INFO L93 Difference]: Finished difference Result 81 states and 97 transitions. [2022-11-23 16:01:46,475 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-23 16:01:46,476 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-23 16:01:46,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:46,476 INFO L225 Difference]: With dead ends: 81 [2022-11-23 16:01:46,476 INFO L226 Difference]: Without dead ends: 81 [2022-11-23 16:01:46,477 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=149, Invalid=313, Unknown=0, NotChecked=0, Total=462 [2022-11-23 16:01:46,477 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 129 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:46,477 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 84 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 16:01:46,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-11-23 16:01:46,479 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 46. [2022-11-23 16:01:46,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 41 states have (on average 1.3902439024390243) internal successors, (57), 45 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:46,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 57 transitions. [2022-11-23 16:01:46,479 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 57 transitions. Word has length 13 [2022-11-23 16:01:46,480 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:46,480 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 57 transitions. [2022-11-23 16:01:46,480 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:46,480 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 57 transitions. [2022-11-23 16:01:46,480 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-23 16:01:46,480 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:46,481 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:46,481 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-11-23 16:01:46,481 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:46,481 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:46,481 INFO L85 PathProgramCache]: Analyzing trace with hash -2026746548, now seen corresponding path program 1 times [2022-11-23 16:01:46,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:46,482 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1759563927] [2022-11-23 16:01:46,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:46,482 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:46,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:46,540 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:46,540 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:46,540 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1759563927] [2022-11-23 16:01:46,540 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1759563927] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:46,541 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:46,541 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 16:01:46,541 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1078727279] [2022-11-23 16:01:46,541 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:46,541 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 16:01:46,542 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:46,542 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 16:01:46,542 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-23 16:01:46,542 INFO L87 Difference]: Start difference. First operand 46 states and 57 transitions. Second operand has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:46,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:46,591 INFO L93 Difference]: Finished difference Result 51 states and 61 transitions. [2022-11-23 16:01:46,591 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 16:01:46,592 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-23 16:01:46,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:46,592 INFO L225 Difference]: With dead ends: 51 [2022-11-23 16:01:46,592 INFO L226 Difference]: Without dead ends: 48 [2022-11-23 16:01:46,592 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-23 16:01:46,593 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 10 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:46,593 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 26 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 16:01:46,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2022-11-23 16:01:46,595 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 47. [2022-11-23 16:01:46,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 42 states have (on average 1.3095238095238095) internal successors, (55), 46 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:46,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 55 transitions. [2022-11-23 16:01:46,596 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 55 transitions. Word has length 13 [2022-11-23 16:01:46,596 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:46,596 INFO L495 AbstractCegarLoop]: Abstraction has 47 states and 55 transitions. [2022-11-23 16:01:46,596 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:46,596 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 55 transitions. [2022-11-23 16:01:46,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-23 16:01:46,597 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:46,597 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:46,597 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-11-23 16:01:46,597 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:46,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:46,598 INFO L85 PathProgramCache]: Analyzing trace with hash -1802581683, now seen corresponding path program 1 times [2022-11-23 16:01:46,598 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:46,598 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [279994229] [2022-11-23 16:01:46,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:46,599 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:46,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:46,838 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:01:46,838 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:46,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [279994229] [2022-11-23 16:01:46,839 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [279994229] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:46,839 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:46,839 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 16:01:46,839 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [440516495] [2022-11-23 16:01:46,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:46,840 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-23 16:01:46,840 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:46,840 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-23 16:01:46,841 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-11-23 16:01:46,841 INFO L87 Difference]: Start difference. First operand 47 states and 55 transitions. Second operand has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:46,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:46,950 INFO L93 Difference]: Finished difference Result 43 states and 50 transitions. [2022-11-23 16:01:46,950 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-23 16:01:46,950 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-23 16:01:46,950 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:46,951 INFO L225 Difference]: With dead ends: 43 [2022-11-23 16:01:46,951 INFO L226 Difference]: Without dead ends: 37 [2022-11-23 16:01:46,951 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-23 16:01:46,952 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 10 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:46,952 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 78 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 16:01:46,952 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-23 16:01:46,953 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 36. [2022-11-23 16:01:46,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 31 states have (on average 1.3548387096774193) internal successors, (42), 35 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:46,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 42 transitions. [2022-11-23 16:01:46,954 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 42 transitions. Word has length 15 [2022-11-23 16:01:46,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:46,954 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 42 transitions. [2022-11-23 16:01:46,954 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:46,954 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 42 transitions. [2022-11-23 16:01:46,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-23 16:01:46,954 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:46,955 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:46,955 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-11-23 16:01:46,955 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:46,955 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:46,955 INFO L85 PathProgramCache]: Analyzing trace with hash 204836708, now seen corresponding path program 1 times [2022-11-23 16:01:46,955 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:46,956 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807162232] [2022-11-23 16:01:46,956 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:46,956 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:46,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:47,187 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:01:47,187 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:47,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807162232] [2022-11-23 16:01:47,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807162232] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:01:47,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 16:01:47,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-23 16:01:47,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1692623709] [2022-11-23 16:01:47,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:01:47,188 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-23 16:01:47,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:47,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-23 16:01:47,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-11-23 16:01:47,190 INFO L87 Difference]: Start difference. First operand 36 states and 42 transitions. Second operand has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:47,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:47,336 INFO L93 Difference]: Finished difference Result 44 states and 50 transitions. [2022-11-23 16:01:47,337 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-23 16:01:47,337 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-23 16:01:47,337 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:47,337 INFO L225 Difference]: With dead ends: 44 [2022-11-23 16:01:47,337 INFO L226 Difference]: Without dead ends: 38 [2022-11-23 16:01:47,338 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-23 16:01:47,338 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 40 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:47,338 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 74 Invalid, 81 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 16:01:47,339 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-23 16:01:47,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 37. [2022-11-23 16:01:47,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 32 states have (on average 1.34375) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:47,340 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-23 16:01:47,340 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 15 [2022-11-23 16:01:47,340 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:47,340 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-23 16:01:47,340 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:47,340 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-23 16:01:47,341 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-23 16:01:47,341 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:47,341 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:47,341 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-11-23 16:01:47,341 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:47,341 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:47,342 INFO L85 PathProgramCache]: Analyzing trace with hash 1117547254, now seen corresponding path program 1 times [2022-11-23 16:01:47,342 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:47,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1154781387] [2022-11-23 16:01:47,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:47,342 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:47,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:47,661 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:01:47,661 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:47,661 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1154781387] [2022-11-23 16:01:47,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1154781387] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:01:47,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1718365082] [2022-11-23 16:01:47,662 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:47,662 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:01:47,662 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:01:47,664 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:01:47,699 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-23 16:01:47,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:47,779 INFO L263 TraceCheckSpWp]: Trace formula consists of 162 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-23 16:01:47,782 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:01:47,898 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:01:47,898 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:01:48,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-23 16:01:48,034 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:01:48,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1718365082] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:01:48,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1899916528] [2022-11-23 16:01:48,040 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:01:48,040 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:01:48,041 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:01:48,041 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:01:48,041 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:01:48,087 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:01:48,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:01:48,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:48,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:48,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:48,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:01:48,374 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:48,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:48,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:48,530 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:01:48,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:01:49,008 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:01:52,610 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2087#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:01:52,610 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:01:52,610 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:01:52,611 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 17 [2022-11-23 16:01:52,611 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2122564619] [2022-11-23 16:01:52,611 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:01:52,611 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-23 16:01:52,611 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:01:52,612 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-23 16:01:52,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=140, Invalid=852, Unknown=0, NotChecked=0, Total=992 [2022-11-23 16:01:52,612 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:52,893 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:01:52,893 INFO L93 Difference]: Finished difference Result 54 states and 59 transitions. [2022-11-23 16:01:52,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-23 16:01:52,894 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-23 16:01:52,894 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:01:52,895 INFO L225 Difference]: With dead ends: 54 [2022-11-23 16:01:52,895 INFO L226 Difference]: Without dead ends: 50 [2022-11-23 16:01:52,895 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 24 SyntacticMatches, 2 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 433 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=201, Invalid=1131, Unknown=0, NotChecked=0, Total=1332 [2022-11-23 16:01:52,896 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 239 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 35 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:01:52,896 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [239 Valid, 35 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 16:01:52,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-23 16:01:52,897 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 33. [2022-11-23 16:01:52,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 30 states have (on average 1.2666666666666666) internal successors, (38), 32 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:52,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 38 transitions. [2022-11-23 16:01:52,898 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 38 transitions. Word has length 17 [2022-11-23 16:01:52,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:01:52,898 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 38 transitions. [2022-11-23 16:01:52,898 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:01:52,898 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 38 transitions. [2022-11-23 16:01:52,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-23 16:01:52,899 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:01:52,899 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:01:52,915 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-11-23 16:01:53,107 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:01:53,107 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:01:53,107 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:01:53,107 INFO L85 PathProgramCache]: Analyzing trace with hash 221052965, now seen corresponding path program 1 times [2022-11-23 16:01:53,108 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:01:53,108 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2138429731] [2022-11-23 16:01:53,108 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:53,108 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:01:53,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:53,306 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:01:53,307 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:01:53,307 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2138429731] [2022-11-23 16:01:53,307 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2138429731] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:01:53,307 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1031244017] [2022-11-23 16:01:53,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:01:53,308 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:01:53,308 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:01:53,309 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:01:53,318 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-23 16:01:53,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:01:53,416 INFO L263 TraceCheckSpWp]: Trace formula consists of 165 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-23 16:01:53,417 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:01:53,526 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:01:53,526 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:01:53,639 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-23 16:01:53,664 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:01:53,665 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1031244017] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:01:53,665 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1665925039] [2022-11-23 16:01:53,671 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:01:53,671 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:01:53,673 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:01:53,673 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:01:53,673 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:01:53,714 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:01:53,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:01:53,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:01:53,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:53,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:53,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:01:54,042 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-23 16:01:54,043 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-23 16:01:54,118 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:54,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:01:54,272 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-23 16:01:54,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 177 treesize of output 181 [2022-11-23 16:01:54,533 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-23 16:01:54,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 328 treesize of output 343 [2022-11-23 16:01:56,936 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:02:00,969 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2323#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:02:00,969 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:02:00,969 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:02:00,970 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 15 [2022-11-23 16:02:00,971 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [535370865] [2022-11-23 16:02:00,971 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:02:00,972 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-23 16:02:00,973 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:02:00,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-23 16:02:00,975 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=146, Invalid=910, Unknown=0, NotChecked=0, Total=1056 [2022-11-23 16:02:00,976 INFO L87 Difference]: Start difference. First operand 33 states and 38 transitions. Second operand has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:01,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:02:01,210 INFO L93 Difference]: Finished difference Result 62 states and 72 transitions. [2022-11-23 16:02:01,213 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-23 16:02:01,213 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-23 16:02:01,213 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:02:01,214 INFO L225 Difference]: With dead ends: 62 [2022-11-23 16:02:01,214 INFO L226 Difference]: Without dead ends: 62 [2022-11-23 16:02:01,215 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 28 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 416 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=202, Invalid=1204, Unknown=0, NotChecked=0, Total=1406 [2022-11-23 16:02:01,215 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 296 mSDsluCounter, 31 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 296 SdHoareTripleChecker+Valid, 38 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:02:01,215 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [296 Valid, 38 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 16:02:01,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-23 16:02:01,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 43. [2022-11-23 16:02:01,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 40 states have (on average 1.3) internal successors, (52), 42 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:01,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 52 transitions. [2022-11-23 16:02:01,218 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 52 transitions. Word has length 19 [2022-11-23 16:02:01,218 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:02:01,218 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 52 transitions. [2022-11-23 16:02:01,218 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:01,219 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 52 transitions. [2022-11-23 16:02:01,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-23 16:02:01,219 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:02:01,219 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:02:01,227 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-23 16:02:01,425 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:02:01,426 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:02:01,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:02:01,426 INFO L85 PathProgramCache]: Analyzing trace with hash -1734844397, now seen corresponding path program 1 times [2022-11-23 16:02:01,426 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:02:01,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1147306454] [2022-11-23 16:02:01,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:02:01,427 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:02:01,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:02:01,632 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:01,632 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:02:01,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1147306454] [2022-11-23 16:02:01,633 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1147306454] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:02:01,633 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1298479228] [2022-11-23 16:02:01,633 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:02:01,633 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:02:01,633 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:02:01,634 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:02:01,658 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-23 16:02:01,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:02:01,732 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 23 conjunts are in the unsatisfiable core [2022-11-23 16:02:01,734 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:02:01,845 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:01,845 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:02:01,980 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-23 16:02:02,005 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:02,005 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1298479228] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:02:02,006 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [278224248] [2022-11-23 16:02:02,009 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:02:02,009 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:02:02,009 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:02:02,010 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:02:02,010 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:02:02,038 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:02:02,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:02:02,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:02:02,131 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:02,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:02,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:02:02,291 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-23 16:02:02,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-23 16:02:02,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:02,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:02,499 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-23 16:02:02,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 177 treesize of output 181 [2022-11-23 16:02:02,698 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-23 16:02:02,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 328 treesize of output 343 [2022-11-23 16:02:04,048 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:02:07,459 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2588#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:02:07,460 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:02:07,460 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:02:07,460 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 18 [2022-11-23 16:02:07,460 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [91584899] [2022-11-23 16:02:07,460 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:02:07,461 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-23 16:02:07,461 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:02:07,461 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-23 16:02:07,462 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=139, Invalid=983, Unknown=0, NotChecked=0, Total=1122 [2022-11-23 16:02:07,462 INFO L87 Difference]: Start difference. First operand 43 states and 52 transitions. Second operand has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:07,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:02:07,842 INFO L93 Difference]: Finished difference Result 58 states and 66 transitions. [2022-11-23 16:02:07,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-23 16:02:07,843 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-23 16:02:07,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:02:07,843 INFO L225 Difference]: With dead ends: 58 [2022-11-23 16:02:07,844 INFO L226 Difference]: Without dead ends: 58 [2022-11-23 16:02:07,844 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 31 SyntacticMatches, 2 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 499 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=266, Invalid=1540, Unknown=0, NotChecked=0, Total=1806 [2022-11-23 16:02:07,845 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 221 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 221 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 16:02:07,845 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [221 Valid, 46 Invalid, 272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 16:02:07,846 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-11-23 16:02:07,847 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 46. [2022-11-23 16:02:07,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 43 states have (on average 1.2790697674418605) internal successors, (55), 45 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:07,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 55 transitions. [2022-11-23 16:02:07,848 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 55 transitions. Word has length 20 [2022-11-23 16:02:07,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:02:07,848 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 55 transitions. [2022-11-23 16:02:07,848 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:07,848 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 55 transitions. [2022-11-23 16:02:07,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-23 16:02:07,849 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:02:07,849 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:02:07,863 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-23 16:02:08,055 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-23 16:02:08,055 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:02:08,055 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:02:08,055 INFO L85 PathProgramCache]: Analyzing trace with hash -738116091, now seen corresponding path program 2 times [2022-11-23 16:02:08,056 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:02:08,056 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1251865955] [2022-11-23 16:02:08,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:02:08,056 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:02:08,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:02:08,460 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:08,461 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:02:08,461 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1251865955] [2022-11-23 16:02:08,461 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1251865955] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:02:08,461 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2074831174] [2022-11-23 16:02:08,461 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 16:02:08,462 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:02:08,462 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:02:08,463 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:02:08,495 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-23 16:02:08,645 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-23 16:02:08,645 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:02:08,647 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-23 16:02:08,649 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:02:08,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-23 16:02:08,764 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:08,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-23 16:02:09,199 INFO L321 Elim1Store]: treesize reduction 24, result has 35.1 percent of original size [2022-11-23 16:02:09,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 48 treesize of output 33 [2022-11-23 16:02:09,224 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:09,225 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:02:09,505 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (|ULTIMATE.start_substring_~pt~0#1.offset| Int) (v_ArrVal_286 (Array Int Int))) (let ((.cse1 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_286))) (let ((.cse0 (select (select .cse1 |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|))) (or (= .cse0 0) (not (= (select (select .cse1 |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) .cse0)))))) is different from false [2022-11-23 16:02:09,515 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:02:09,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 64 treesize of output 42 [2022-11-23 16:02:09,539 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:02:09,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 111 treesize of output 116 [2022-11-23 16:02:09,556 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:02:09,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 64 [2022-11-23 16:02:09,926 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:09,926 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2074831174] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:02:09,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [852136460] [2022-11-23 16:02:09,928 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:02:09,928 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:02:09,929 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:02:09,929 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:02:09,929 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:02:09,955 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:02:09,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:02:09,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:10,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:10,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:10,129 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:02:10,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:10,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:10,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:10,281 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:02:10,282 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:02:10,553 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:02:13,402 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2882#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:02:13,402 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:02:13,402 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:02:13,403 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 13] total 31 [2022-11-23 16:02:13,403 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1374988662] [2022-11-23 16:02:13,403 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:02:13,403 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-23 16:02:13,403 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:02:13,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-23 16:02:13,404 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=178, Invalid=1805, Unknown=1, NotChecked=86, Total=2070 [2022-11-23 16:02:13,405 INFO L87 Difference]: Start difference. First operand 46 states and 55 transitions. Second operand has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:23,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:02:23,543 INFO L93 Difference]: Finished difference Result 122 states and 136 transitions. [2022-11-23 16:02:23,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-11-23 16:02:23,545 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-23 16:02:23,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:02:23,546 INFO L225 Difference]: With dead ends: 122 [2022-11-23 16:02:23,546 INFO L226 Difference]: Without dead ends: 116 [2022-11-23 16:02:23,547 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 29 SyntacticMatches, 4 SemanticMatches, 70 ConstructedPredicates, 1 IntricatePredicates, 3 DeprecatedPredicates, 1528 ImplicationChecksByTransitivity, 13.2s TimeCoverageRelationStatistics Valid=440, Invalid=4533, Unknown=1, NotChecked=138, Total=5112 [2022-11-23 16:02:23,548 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 134 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 522 mSolverCounterSat, 11 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 589 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 522 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 55 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-23 16:02:23,548 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 95 Invalid, 589 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 522 Invalid, 1 Unknown, 55 Unchecked, 0.5s Time] [2022-11-23 16:02:23,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2022-11-23 16:02:23,550 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 90. [2022-11-23 16:02:23,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 87 states have (on average 1.2183908045977012) internal successors, (106), 89 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:23,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 106 transitions. [2022-11-23 16:02:23,552 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 106 transitions. Word has length 22 [2022-11-23 16:02:23,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:02:23,552 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 106 transitions. [2022-11-23 16:02:23,552 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:23,552 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 106 transitions. [2022-11-23 16:02:23,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-23 16:02:23,553 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:02:23,553 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:02:23,563 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-23 16:02:23,758 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:02:23,759 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:02:23,759 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:02:23,759 INFO L85 PathProgramCache]: Analyzing trace with hash 1722857087, now seen corresponding path program 1 times [2022-11-23 16:02:23,759 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:02:23,760 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [833690845] [2022-11-23 16:02:23,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:02:23,760 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:02:23,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:02:24,006 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:24,007 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:02:24,007 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [833690845] [2022-11-23 16:02:24,007 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [833690845] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:02:24,007 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [823433165] [2022-11-23 16:02:24,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:02:24,007 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:02:24,007 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:02:24,009 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:02:24,040 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-23 16:02:24,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:02:24,120 INFO L263 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-23 16:02:24,121 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:02:24,194 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 16:02:24,195 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:02:24,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 6 [2022-11-23 16:02:24,294 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 16:02:24,294 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [823433165] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:02:24,294 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1135911260] [2022-11-23 16:02:24,296 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:02:24,296 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:02:24,296 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:02:24,296 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:02:24,296 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:02:24,327 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:02:24,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:02:24,369 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:02:24,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:24,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:24,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:24,553 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:02:24,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:24,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:24,722 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:02:24,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:02:25,156 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:02:28,956 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1135911260] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 16:02:28,956 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:02:28,957 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [7, 5, 5] total 28 [2022-11-23 16:02:28,957 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [678000013] [2022-11-23 16:02:28,957 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 16:02:28,958 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-23 16:02:28,958 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:02:28,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-23 16:02:28,959 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=664, Unknown=0, NotChecked=0, Total=812 [2022-11-23 16:02:28,959 INFO L87 Difference]: Start difference. First operand 90 states and 106 transitions. Second operand has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:32,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:02:32,757 INFO L93 Difference]: Finished difference Result 94 states and 108 transitions. [2022-11-23 16:02:32,758 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-23 16:02:32,758 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-23 16:02:32,758 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:02:32,759 INFO L225 Difference]: With dead ends: 94 [2022-11-23 16:02:32,759 INFO L226 Difference]: Without dead ends: 94 [2022-11-23 16:02:32,759 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 49 SyntacticMatches, 1 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 226 ImplicationChecksByTransitivity, 7.4s TimeCoverageRelationStatistics Valid=280, Invalid=1126, Unknown=0, NotChecked=0, Total=1406 [2022-11-23 16:02:32,760 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 76 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 16:02:32,760 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 3 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 16:02:32,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-23 16:02:32,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 90. [2022-11-23 16:02:32,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 87 states have (on average 1.1954022988505748) internal successors, (104), 89 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:32,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 104 transitions. [2022-11-23 16:02:32,763 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 104 transitions. Word has length 24 [2022-11-23 16:02:32,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:02:32,763 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 104 transitions. [2022-11-23 16:02:32,763 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:32,764 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 104 transitions. [2022-11-23 16:02:32,768 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-23 16:02:32,768 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:02:32,768 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:02:32,774 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-23 16:02:32,974 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-11-23 16:02:32,974 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:02:32,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:02:32,974 INFO L85 PathProgramCache]: Analyzing trace with hash 1241317677, now seen corresponding path program 3 times [2022-11-23 16:02:32,975 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:02:32,975 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [46117637] [2022-11-23 16:02:32,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:02:32,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:02:32,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:02:33,299 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:02:33,300 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:02:33,300 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [46117637] [2022-11-23 16:02:33,300 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [46117637] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:02:33,300 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1287705289] [2022-11-23 16:02:33,300 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-23 16:02:33,300 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:02:33,300 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:02:33,302 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:02:33,334 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-23 16:02:33,445 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-23 16:02:33,445 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:02:33,447 INFO L263 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 26 conjunts are in the unsatisfiable core [2022-11-23 16:02:33,449 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:02:33,465 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-23 16:02:33,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-23 16:02:33,621 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:02:33,621 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:02:33,922 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:02:33,922 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1287705289] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:02:33,922 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [276900389] [2022-11-23 16:02:33,924 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:02:33,924 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:02:33,924 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:02:33,924 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:02:33,924 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:02:33,960 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:02:33,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:02:34,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:02:34,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:34,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:34,144 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:34,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:02:34,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:34,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:34,356 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:02:34,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:02:34,658 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:02:37,719 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3705#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:02:37,719 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:02:37,719 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:02:37,719 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 23 [2022-11-23 16:02:37,719 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [397227136] [2022-11-23 16:02:37,720 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:02:37,720 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-23 16:02:37,720 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:02:37,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-23 16:02:37,721 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=1216, Unknown=0, NotChecked=0, Total=1406 [2022-11-23 16:02:37,721 INFO L87 Difference]: Start difference. First operand 90 states and 104 transitions. Second operand has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:38,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:02:38,190 INFO L93 Difference]: Finished difference Result 132 states and 150 transitions. [2022-11-23 16:02:38,191 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-23 16:02:38,191 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-11-23 16:02:38,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:02:38,193 INFO L225 Difference]: With dead ends: 132 [2022-11-23 16:02:38,193 INFO L226 Difference]: Without dead ends: 132 [2022-11-23 16:02:38,194 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 540 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=309, Invalid=1671, Unknown=0, NotChecked=0, Total=1980 [2022-11-23 16:02:38,194 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 298 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 395 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 298 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 401 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 395 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 16:02:38,195 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [298 Valid, 104 Invalid, 401 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 395 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 16:02:38,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2022-11-23 16:02:38,198 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 97. [2022-11-23 16:02:38,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 94 states have (on average 1.2127659574468086) internal successors, (114), 96 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:38,199 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 114 transitions. [2022-11-23 16:02:38,199 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 114 transitions. Word has length 26 [2022-11-23 16:02:38,199 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:02:38,200 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 114 transitions. [2022-11-23 16:02:38,200 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:38,201 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 114 transitions. [2022-11-23 16:02:38,201 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-23 16:02:38,201 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:02:38,201 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:02:38,208 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-23 16:02:38,407 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-11-23 16:02:38,407 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:02:38,408 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:02:38,408 INFO L85 PathProgramCache]: Analyzing trace with hash -1667724320, now seen corresponding path program 2 times [2022-11-23 16:02:38,408 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:02:38,408 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1570402342] [2022-11-23 16:02:38,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:02:38,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:02:38,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:02:38,906 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:38,906 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:02:38,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1570402342] [2022-11-23 16:02:38,906 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1570402342] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:02:38,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1615289972] [2022-11-23 16:02:38,906 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 16:02:38,907 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:02:38,907 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:02:38,908 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:02:38,940 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-23 16:02:39,032 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-23 16:02:39,032 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:02:39,034 INFO L263 TraceCheckSpWp]: Trace formula consists of 213 conjuncts, 32 conjunts are in the unsatisfiable core [2022-11-23 16:02:39,036 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:02:39,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:39,202 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:02:39,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:02:39,398 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-23 16:02:39,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-23 16:02:39,420 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:39,420 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:02:39,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-23 16:02:39,671 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:39,671 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1615289972] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:02:39,671 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2014951356] [2022-11-23 16:02:39,673 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:02:39,673 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:02:39,673 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:02:39,673 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:02:39,673 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:02:39,717 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:02:39,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:02:39,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:02:39,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:39,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:39,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:02:39,949 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-23 16:02:39,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-23 16:02:40,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:40,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:40,079 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:02:40,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:02:40,665 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:02:44,497 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4147#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:02:44,497 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:02:44,497 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:02:44,497 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 22 [2022-11-23 16:02:44,497 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1304086492] [2022-11-23 16:02:44,497 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:02:44,498 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-23 16:02:44,499 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:02:44,499 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-23 16:02:44,500 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=1325, Unknown=0, NotChecked=0, Total=1482 [2022-11-23 16:02:44,500 INFO L87 Difference]: Start difference. First operand 97 states and 114 transitions. Second operand has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:44,911 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:02:44,911 INFO L93 Difference]: Finished difference Result 115 states and 130 transitions. [2022-11-23 16:02:44,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-23 16:02:44,913 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-23 16:02:44,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:02:44,914 INFO L225 Difference]: With dead ends: 115 [2022-11-23 16:02:44,914 INFO L226 Difference]: Without dead ends: 79 [2022-11-23 16:02:44,914 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 53 SyntacticMatches, 2 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 658 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=239, Invalid=1741, Unknown=0, NotChecked=0, Total=1980 [2022-11-23 16:02:44,915 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 82 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:02:44,915 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [82 Valid, 94 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 16:02:44,915 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-11-23 16:02:44,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 78. [2022-11-23 16:02:44,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 75 states have (on average 1.2133333333333334) internal successors, (91), 77 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:44,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 91 transitions. [2022-11-23 16:02:44,917 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 91 transitions. Word has length 28 [2022-11-23 16:02:44,917 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:02:44,917 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 91 transitions. [2022-11-23 16:02:44,918 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:44,918 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 91 transitions. [2022-11-23 16:02:44,918 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-23 16:02:44,918 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:02:44,918 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:02:44,926 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-23 16:02:45,119 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-23 16:02:45,119 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:02:45,119 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:02:45,119 INFO L85 PathProgramCache]: Analyzing trace with hash 427887228, now seen corresponding path program 2 times [2022-11-23 16:02:45,119 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:02:45,119 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1314399833] [2022-11-23 16:02:45,120 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:02:45,120 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:02:45,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:02:45,400 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 17 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:02:45,400 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:02:45,401 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1314399833] [2022-11-23 16:02:45,401 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1314399833] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:02:45,401 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2102323606] [2022-11-23 16:02:45,401 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 16:02:45,401 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:02:45,401 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:02:45,403 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:02:45,416 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-23 16:02:45,714 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-23 16:02:45,714 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:02:45,716 INFO L263 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-23 16:02:45,718 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:02:45,945 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:02:45,945 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:02:46,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-23 16:02:46,241 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:02:46,241 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2102323606] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:02:46,241 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1128833852] [2022-11-23 16:02:46,243 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:02:46,243 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:02:46,243 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:02:46,243 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:02:46,243 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:02:46,274 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:02:46,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:02:46,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:02:46,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:46,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:46,440 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:46,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:02:46,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:46,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:46,621 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:02:46,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:02:46,832 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:02:49,920 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4561#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:02:49,920 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:02:49,920 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:02:49,920 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 23 [2022-11-23 16:02:49,920 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1581732755] [2022-11-23 16:02:49,920 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:02:49,921 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-23 16:02:49,921 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:02:49,921 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-23 16:02:49,922 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=1313, Unknown=0, NotChecked=0, Total=1482 [2022-11-23 16:02:49,922 INFO L87 Difference]: Start difference. First operand 78 states and 91 transitions. Second operand has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:50,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:02:50,509 INFO L93 Difference]: Finished difference Result 97 states and 109 transitions. [2022-11-23 16:02:50,510 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-23 16:02:50,510 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-23 16:02:50,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:02:50,511 INFO L225 Difference]: With dead ends: 97 [2022-11-23 16:02:50,511 INFO L226 Difference]: Without dead ends: 97 [2022-11-23 16:02:50,512 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 53 SyntacticMatches, 3 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 629 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=365, Invalid=2085, Unknown=0, NotChecked=0, Total=2450 [2022-11-23 16:02:50,513 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 355 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 365 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 355 SdHoareTripleChecker+Valid, 63 SdHoareTripleChecker+Invalid, 374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 365 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 16:02:50,513 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [355 Valid, 63 Invalid, 374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 365 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 16:02:50,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-11-23 16:02:50,515 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 81. [2022-11-23 16:02:50,515 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 78 states have (on average 1.205128205128205) internal successors, (94), 80 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:50,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 94 transitions. [2022-11-23 16:02:50,515 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 94 transitions. Word has length 29 [2022-11-23 16:02:50,516 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:02:50,516 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 94 transitions. [2022-11-23 16:02:50,516 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:50,516 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 94 transitions. [2022-11-23 16:02:50,517 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-23 16:02:50,517 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:02:50,517 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:02:50,523 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-23 16:02:50,722 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-23 16:02:50,722 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:02:50,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:02:50,723 INFO L85 PathProgramCache]: Analyzing trace with hash 294381018, now seen corresponding path program 3 times [2022-11-23 16:02:50,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:02:50,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1023392581] [2022-11-23 16:02:50,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:02:50,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:02:50,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:02:51,004 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:51,004 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:02:51,004 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1023392581] [2022-11-23 16:02:51,004 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1023392581] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:02:51,005 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2072342554] [2022-11-23 16:02:51,005 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-23 16:02:51,005 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:02:51,005 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:02:51,007 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:02:51,015 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-23 16:02:51,142 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-23 16:02:51,142 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:02:51,144 INFO L263 TraceCheckSpWp]: Trace formula consists of 226 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-23 16:02:51,146 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:02:51,327 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:51,327 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:02:51,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-23 16:02:51,558 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:02:51,558 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2072342554] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:02:51,558 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [345700519] [2022-11-23 16:02:51,560 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:02:51,560 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:02:51,560 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:02:51,561 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:02:51,561 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:02:51,605 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:02:51,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:02:51,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:02:51,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:51,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:51,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:51,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:02:51,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:51,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:51,962 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:02:51,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:02:52,263 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:02:56,307 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4969#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:02:56,307 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:02:56,307 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:02:56,307 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 18 [2022-11-23 16:02:56,308 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1042089383] [2022-11-23 16:02:56,308 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:02:56,308 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-23 16:02:56,308 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:02:56,309 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-23 16:02:56,309 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=166, Invalid=1094, Unknown=0, NotChecked=0, Total=1260 [2022-11-23 16:02:56,310 INFO L87 Difference]: Start difference. First operand 81 states and 94 transitions. Second operand has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:56,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:02:56,699 INFO L93 Difference]: Finished difference Result 143 states and 162 transitions. [2022-11-23 16:02:56,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-23 16:02:56,700 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-11-23 16:02:56,700 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:02:56,700 INFO L225 Difference]: With dead ends: 143 [2022-11-23 16:02:56,701 INFO L226 Difference]: Without dead ends: 143 [2022-11-23 16:02:56,701 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 58 SyntacticMatches, 3 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 446 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=248, Invalid=1474, Unknown=0, NotChecked=0, Total=1722 [2022-11-23 16:02:56,702 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 269 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 287 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 269 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 293 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 16:02:56,702 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [269 Valid, 62 Invalid, 293 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 287 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 16:02:56,702 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2022-11-23 16:02:56,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 110. [2022-11-23 16:02:56,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 107 states have (on average 1.205607476635514) internal successors, (129), 109 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:56,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 129 transitions. [2022-11-23 16:02:56,705 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 129 transitions. Word has length 30 [2022-11-23 16:02:56,705 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:02:56,705 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 129 transitions. [2022-11-23 16:02:56,705 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:02:56,705 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 129 transitions. [2022-11-23 16:02:56,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-23 16:02:56,706 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:02:56,706 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:02:56,718 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-23 16:02:56,912 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-23 16:02:56,913 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:02:56,913 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:02:56,913 INFO L85 PathProgramCache]: Analyzing trace with hash -1117195730, now seen corresponding path program 4 times [2022-11-23 16:02:56,913 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:02:56,913 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1929868590] [2022-11-23 16:02:56,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:02:56,913 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:02:56,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:02:57,572 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 3 proven. 19 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:02:57,572 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:02:57,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1929868590] [2022-11-23 16:02:57,572 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1929868590] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:02:57,573 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [206948687] [2022-11-23 16:02:57,573 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-23 16:02:57,573 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:02:57,573 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:02:57,575 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:02:57,594 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-23 16:02:57,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:02:57,703 INFO L263 TraceCheckSpWp]: Trace formula consists of 248 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-23 16:02:57,705 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:02:57,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:58,214 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-23 16:02:58,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-23 16:02:58,218 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:02:58,219 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:02:58,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-23 16:02:58,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-23 16:02:58,582 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:02:58,582 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [206948687] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:02:58,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1473276829] [2022-11-23 16:02:58,583 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:02:58,584 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:02:58,584 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:02:58,584 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:02:58,584 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:02:58,636 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:02:58,639 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:02:58,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:02:58,718 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:58,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:58,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:58,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:02:58,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:58,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:02:58,980 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:02:58,980 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:02:59,258 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:03:03,911 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5461#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:03:03,912 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:03:03,912 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:03:03,912 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 12, 12] total 31 [2022-11-23 16:03:03,912 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [86784129] [2022-11-23 16:03:03,912 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:03:03,913 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-23 16:03:03,913 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:03:03,913 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-23 16:03:03,914 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=145, Invalid=1835, Unknown=0, NotChecked=0, Total=1980 [2022-11-23 16:03:03,914 INFO L87 Difference]: Start difference. First operand 110 states and 129 transitions. Second operand has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:07,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:03:07,474 INFO L93 Difference]: Finished difference Result 359 states and 402 transitions. [2022-11-23 16:03:07,474 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2022-11-23 16:03:07,475 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-23 16:03:07,475 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:03:07,477 INFO L225 Difference]: With dead ends: 359 [2022-11-23 16:03:07,478 INFO L226 Difference]: Without dead ends: 347 [2022-11-23 16:03:07,479 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 61 SyntacticMatches, 2 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 4 DeprecatedPredicates, 2043 ImplicationChecksByTransitivity, 8.0s TimeCoverageRelationStatistics Valid=770, Invalid=7062, Unknown=0, NotChecked=0, Total=7832 [2022-11-23 16:03:07,480 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 625 mSDsluCounter, 261 mSDsCounter, 0 mSdLazyCounter, 1096 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 625 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 1110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 1096 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-23 16:03:07,481 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [625 Valid, 275 Invalid, 1110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 1096 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-23 16:03:07,481 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 347 states. [2022-11-23 16:03:07,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 347 to 185. [2022-11-23 16:03:07,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 182 states have (on average 1.1923076923076923) internal successors, (217), 184 states have internal predecessors, (217), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:07,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 217 transitions. [2022-11-23 16:03:07,487 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 217 transitions. Word has length 31 [2022-11-23 16:03:07,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:03:07,487 INFO L495 AbstractCegarLoop]: Abstraction has 185 states and 217 transitions. [2022-11-23 16:03:07,488 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:07,488 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 217 transitions. [2022-11-23 16:03:07,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-23 16:03:07,489 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:03:07,489 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:03:07,505 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-23 16:03:07,703 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:03:07,704 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:03:07,704 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:03:07,704 INFO L85 PathProgramCache]: Analyzing trace with hash -1600115824, now seen corresponding path program 1 times [2022-11-23 16:03:07,704 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:03:07,704 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2071153557] [2022-11-23 16:03:07,704 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:03:07,704 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:03:07,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:03:08,003 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 0 proven. 19 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:03:08,003 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:03:08,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2071153557] [2022-11-23 16:03:08,003 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2071153557] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:03:08,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1153774109] [2022-11-23 16:03:08,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:03:08,003 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:03:08,004 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:03:08,007 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:03:08,034 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-23 16:03:08,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:03:08,135 INFO L263 TraceCheckSpWp]: Trace formula consists of 250 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-23 16:03:08,137 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:03:08,389 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 1 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:03:08,389 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:03:08,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-23 16:03:08,767 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 1 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:03:08,767 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1153774109] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:03:08,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1292112430] [2022-11-23 16:03:08,769 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:03:08,769 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:03:08,769 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:03:08,769 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:03:08,769 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:03:08,805 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:03:08,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:03:08,849 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:03:08,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:08,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:08,980 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:09,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:03:09,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:09,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:09,180 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:03:09,180 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:03:09,956 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:03:13,567 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6321#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:03:13,567 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:03:13,567 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:03:13,567 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 20 [2022-11-23 16:03:13,567 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [440270316] [2022-11-23 16:03:13,567 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:03:13,568 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-23 16:03:13,568 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:03:13,568 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-23 16:03:13,569 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=1238, Unknown=0, NotChecked=0, Total=1406 [2022-11-23 16:03:13,569 INFO L87 Difference]: Start difference. First operand 185 states and 217 transitions. Second operand has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:14,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:03:14,258 INFO L93 Difference]: Finished difference Result 211 states and 237 transitions. [2022-11-23 16:03:14,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-23 16:03:14,258 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-23 16:03:14,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:03:14,260 INFO L225 Difference]: With dead ends: 211 [2022-11-23 16:03:14,260 INFO L226 Difference]: Without dead ends: 211 [2022-11-23 16:03:14,261 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 66 SyntacticMatches, 3 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 637 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=384, Invalid=2166, Unknown=0, NotChecked=0, Total=2550 [2022-11-23 16:03:14,262 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 495 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 344 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 495 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 352 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 344 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 16:03:14,262 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [495 Valid, 54 Invalid, 352 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 344 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 16:03:14,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2022-11-23 16:03:14,265 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 185. [2022-11-23 16:03:14,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 182 states have (on average 1.1813186813186813) internal successors, (215), 184 states have internal predecessors, (215), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:14,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 215 transitions. [2022-11-23 16:03:14,267 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 215 transitions. Word has length 33 [2022-11-23 16:03:14,267 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:03:14,267 INFO L495 AbstractCegarLoop]: Abstraction has 185 states and 215 transitions. [2022-11-23 16:03:14,267 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:14,267 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 215 transitions. [2022-11-23 16:03:14,268 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-23 16:03:14,268 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:03:14,268 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:03:14,275 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-11-23 16:03:14,474 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:03:14,475 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:03:14,475 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:03:14,475 INFO L85 PathProgramCache]: Analyzing trace with hash 1925889798, now seen corresponding path program 5 times [2022-11-23 16:03:14,475 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:03:14,475 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1422053128] [2022-11-23 16:03:14,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:03:14,476 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:03:14,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:03:14,931 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:03:14,932 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:03:14,932 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1422053128] [2022-11-23 16:03:14,932 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1422053128] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:03:14,932 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [465492562] [2022-11-23 16:03:14,932 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 16:03:14,932 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:03:14,932 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:03:14,935 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:03:14,962 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-23 16:03:15,089 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-23 16:03:15,089 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:03:15,091 INFO L263 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-23 16:03:15,093 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:03:15,348 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:03:15,348 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:03:15,635 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-23 16:03:15,720 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:03:15,720 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [465492562] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:03:15,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [112641587] [2022-11-23 16:03:15,722 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:03:15,722 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:03:15,722 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:03:15,722 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:03:15,722 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:03:15,756 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:03:15,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:03:15,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:15,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:15,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:15,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:03:15,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:15,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:16,047 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:03:16,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:03:16,508 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:03:19,318 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6991#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:03:19,319 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:03:19,319 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:03:19,319 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 27 [2022-11-23 16:03:19,319 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [205502626] [2022-11-23 16:03:19,319 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:03:19,319 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-23 16:03:19,320 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:03:19,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-23 16:03:19,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1525, Unknown=0, NotChecked=0, Total=1722 [2022-11-23 16:03:19,321 INFO L87 Difference]: Start difference. First operand 185 states and 215 transitions. Second operand has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:20,186 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:03:20,186 INFO L93 Difference]: Finished difference Result 263 states and 298 transitions. [2022-11-23 16:03:20,187 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-23 16:03:20,187 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-23 16:03:20,187 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:03:20,188 INFO L225 Difference]: With dead ends: 263 [2022-11-23 16:03:20,188 INFO L226 Difference]: Without dead ends: 263 [2022-11-23 16:03:20,189 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 69 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 850 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=357, Invalid=2193, Unknown=0, NotChecked=0, Total=2550 [2022-11-23 16:03:20,190 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 396 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 585 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 396 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 597 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 585 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-23 16:03:20,190 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [396 Valid, 158 Invalid, 597 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 585 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-23 16:03:20,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 263 states. [2022-11-23 16:03:20,195 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 263 to 197. [2022-11-23 16:03:20,195 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 194 states have (on average 1.1958762886597938) internal successors, (232), 196 states have internal predecessors, (232), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:20,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 232 transitions. [2022-11-23 16:03:20,196 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 232 transitions. Word has length 35 [2022-11-23 16:03:20,196 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:03:20,196 INFO L495 AbstractCegarLoop]: Abstraction has 197 states and 232 transitions. [2022-11-23 16:03:20,196 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:20,196 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 232 transitions. [2022-11-23 16:03:20,197 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-23 16:03:20,197 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:03:20,197 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:03:20,218 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-23 16:03:20,406 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-11-23 16:03:20,407 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:03:20,407 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:03:20,407 INFO L85 PathProgramCache]: Analyzing trace with hash 2011222531, now seen corresponding path program 3 times [2022-11-23 16:03:20,407 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:03:20,407 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112174082] [2022-11-23 16:03:20,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:03:20,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:03:20,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:03:20,832 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 1 proven. 35 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:03:20,833 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:03:20,833 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112174082] [2022-11-23 16:03:20,833 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112174082] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:03:20,833 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [860119036] [2022-11-23 16:03:20,833 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-23 16:03:20,833 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:03:20,833 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:03:20,834 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:03:20,862 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-23 16:03:20,999 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-23 16:03:20,999 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:03:21,002 INFO L263 TraceCheckSpWp]: Trace formula consists of 288 conjuncts, 41 conjunts are in the unsatisfiable core [2022-11-23 16:03:21,004 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:03:21,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:21,625 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-23 16:03:21,625 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-23 16:03:21,665 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 6 proven. 30 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:03:21,665 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:03:21,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-23 16:03:21,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-23 16:03:22,124 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 6 proven. 30 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:03:22,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [860119036] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:03:22,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [483065733] [2022-11-23 16:03:22,126 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:03:22,126 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:03:22,127 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:03:22,127 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:03:22,127 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:03:22,146 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:03:22,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:03:22,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:03:22,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:22,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:22,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:22,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:03:22,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:22,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:22,477 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:03:22,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:03:22,695 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:03:26,291 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7736#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:03:26,291 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:03:26,292 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:03:26,292 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 14, 14] total 31 [2022-11-23 16:03:26,292 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [111034729] [2022-11-23 16:03:26,292 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:03:26,292 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-23 16:03:26,292 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:03:26,293 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-23 16:03:26,294 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=1832, Unknown=0, NotChecked=0, Total=1980 [2022-11-23 16:03:26,294 INFO L87 Difference]: Start difference. First operand 197 states and 232 transitions. Second operand has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:31,810 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:03:31,810 INFO L93 Difference]: Finished difference Result 550 states and 613 transitions. [2022-11-23 16:03:31,810 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-11-23 16:03:31,810 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-23 16:03:31,811 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:03:31,812 INFO L225 Difference]: With dead ends: 550 [2022-11-23 16:03:31,812 INFO L226 Difference]: Without dead ends: 540 [2022-11-23 16:03:31,815 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 78 SyntacticMatches, 2 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 5 DeprecatedPredicates, 2981 ImplicationChecksByTransitivity, 7.8s TimeCoverageRelationStatistics Valid=1085, Invalid=9835, Unknown=0, NotChecked=0, Total=10920 [2022-11-23 16:03:31,815 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 739 mSDsluCounter, 568 mSDsCounter, 0 mSdLazyCounter, 2389 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 739 SdHoareTripleChecker+Valid, 618 SdHoareTripleChecker+Invalid, 2396 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 2389 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:03:31,816 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [739 Valid, 618 Invalid, 2396 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 2389 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2022-11-23 16:03:31,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 540 states. [2022-11-23 16:03:31,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 540 to 264. [2022-11-23 16:03:31,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 261 states have (on average 1.1915708812260537) internal successors, (311), 263 states have internal predecessors, (311), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:31,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 311 transitions. [2022-11-23 16:03:31,826 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 311 transitions. Word has length 38 [2022-11-23 16:03:31,826 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:03:31,826 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 311 transitions. [2022-11-23 16:03:31,826 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:31,826 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 311 transitions. [2022-11-23 16:03:31,827 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-23 16:03:31,827 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:03:31,827 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:03:31,840 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-11-23 16:03:32,033 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-11-23 16:03:32,034 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:03:32,034 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:03:32,034 INFO L85 PathProgramCache]: Analyzing trace with hash 202916299, now seen corresponding path program 4 times [2022-11-23 16:03:32,035 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:03:32,035 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1135490008] [2022-11-23 16:03:32,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:03:32,035 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:03:32,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:03:33,563 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:03:33,564 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:03:33,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1135490008] [2022-11-23 16:03:33,564 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1135490008] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:03:33,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [313920092] [2022-11-23 16:03:33,564 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-23 16:03:33,564 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:03:33,564 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:03:33,567 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:03:33,599 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-23 16:03:33,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:03:33,715 INFO L263 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-23 16:03:33,718 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:03:33,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-23 16:03:33,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:34,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-23 16:03:34,233 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:03:34,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 10 [2022-11-23 16:03:34,271 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:03:34,271 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:03:34,428 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:03:34,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-23 16:03:34,448 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:03:34,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-23 16:03:34,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-23 16:03:34,725 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:03:34,725 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [313920092] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:03:34,725 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1945163082] [2022-11-23 16:03:34,727 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:03:34,727 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:03:34,727 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:03:34,728 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:03:34,728 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:03:34,756 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:03:34,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:03:34,799 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:03:34,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:34,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:34,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:34,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:03:35,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:35,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:35,107 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:03:35,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:03:35,372 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:03:40,068 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8944#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:03:40,068 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:03:40,068 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:03:40,068 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 11] total 30 [2022-11-23 16:03:40,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1415969088] [2022-11-23 16:03:40,068 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:03:40,069 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-23 16:03:40,069 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:03:40,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-23 16:03:40,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=1992, Unknown=2, NotChecked=0, Total=2162 [2022-11-23 16:03:40,070 INFO L87 Difference]: Start difference. First operand 264 states and 311 transitions. Second operand has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:42,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:03:42,309 INFO L93 Difference]: Finished difference Result 392 states and 447 transitions. [2022-11-23 16:03:42,310 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-23 16:03:42,310 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-23 16:03:42,310 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:03:42,311 INFO L225 Difference]: With dead ends: 392 [2022-11-23 16:03:42,311 INFO L226 Difference]: Without dead ends: 329 [2022-11-23 16:03:42,311 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 147 GetRequests, 83 SyntacticMatches, 1 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1001 ImplicationChecksByTransitivity, 7.5s TimeCoverageRelationStatistics Valid=435, Invalid=3723, Unknown=2, NotChecked=0, Total=4160 [2022-11-23 16:03:42,312 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 310 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 486 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 310 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 495 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 486 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-23 16:03:42,312 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [310 Valid, 157 Invalid, 495 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 486 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-23 16:03:42,313 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2022-11-23 16:03:42,318 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 326. [2022-11-23 16:03:42,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 326 states, 323 states have (on average 1.1640866873065014) internal successors, (376), 325 states have internal predecessors, (376), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:42,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 326 states to 326 states and 376 transitions. [2022-11-23 16:03:42,320 INFO L78 Accepts]: Start accepts. Automaton has 326 states and 376 transitions. Word has length 39 [2022-11-23 16:03:42,320 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:03:42,320 INFO L495 AbstractCegarLoop]: Abstraction has 326 states and 376 transitions. [2022-11-23 16:03:42,320 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:42,320 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 376 transitions. [2022-11-23 16:03:42,321 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-23 16:03:42,321 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:03:42,321 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:03:42,331 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-23 16:03:42,527 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:03:42,528 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:03:42,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:03:42,528 INFO L85 PathProgramCache]: Analyzing trace with hash 94811765, now seen corresponding path program 2 times [2022-11-23 16:03:42,528 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:03:42,528 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1382462699] [2022-11-23 16:03:42,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:03:42,529 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:03:42,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:03:43,450 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 12 proven. 30 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:03:43,450 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:03:43,450 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1382462699] [2022-11-23 16:03:43,451 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1382462699] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:03:43,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [923028818] [2022-11-23 16:03:43,451 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 16:03:43,451 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:03:43,451 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:03:43,452 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:03:43,454 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-23 16:03:43,603 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-23 16:03:43,604 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:03:43,606 INFO L263 TraceCheckSpWp]: Trace formula consists of 280 conjuncts, 67 conjunts are in the unsatisfiable core [2022-11-23 16:03:43,609 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:03:43,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-23 16:03:43,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:43,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-23 16:03:45,153 INFO L321 Elim1Store]: treesize reduction 53, result has 49.5 percent of original size [2022-11-23 16:03:45,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 66 treesize of output 79 [2022-11-23 16:03:45,197 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 12 proven. 21 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:03:45,198 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:03:45,851 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (|ULTIMATE.start_substring_~pt~0#1.offset| Int) (v_ArrVal_674 (Array Int Int))) (let ((.cse2 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_674))) (let ((.cse0 (select .cse2 |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (.cse1 (select (select .cse2 |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|))) (or (= (select .cse0 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (not (= (select .cse0 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) .cse1)) (= .cse1 0))))) is different from false [2022-11-23 16:03:45,864 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:03:45,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 54 [2022-11-23 16:03:45,901 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:03:45,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 136 treesize of output 156 [2022-11-23 16:03:45,926 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:03:45,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 79 treesize of output 81 [2022-11-23 16:03:46,564 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 17 proven. 16 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:03:46,564 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [923028818] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:03:46,565 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1484820238] [2022-11-23 16:03:46,566 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:03:46,566 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:03:46,567 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:03:46,567 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:03:46,567 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:03:46,603 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:03:46,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:03:46,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:46,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:46,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:46,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:46,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:46,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:46,862 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:03:46,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:03:48,236 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:03:52,148 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9997#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:03:52,148 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:03:52,148 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:03:52,148 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 48 [2022-11-23 16:03:52,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [154997032] [2022-11-23 16:03:52,149 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:03:52,149 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-23 16:03:52,149 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:03:52,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-23 16:03:52,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=298, Invalid=3737, Unknown=1, NotChecked=124, Total=4160 [2022-11-23 16:03:52,150 INFO L87 Difference]: Start difference. First operand 326 states and 376 transitions. Second operand has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:54,677 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:03:54,678 INFO L93 Difference]: Finished difference Result 312 states and 357 transitions. [2022-11-23 16:03:54,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-23 16:03:54,678 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-23 16:03:54,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:03:54,680 INFO L225 Difference]: With dead ends: 312 [2022-11-23 16:03:54,680 INFO L226 Difference]: Without dead ends: 237 [2022-11-23 16:03:54,680 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 72 SyntacticMatches, 1 SemanticMatches, 83 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1666 ImplicationChecksByTransitivity, 8.0s TimeCoverageRelationStatistics Valid=711, Invalid=6264, Unknown=1, NotChecked=164, Total=7140 [2022-11-23 16:03:54,681 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 241 mSDsluCounter, 160 mSDsCounter, 0 mSdLazyCounter, 680 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 241 SdHoareTripleChecker+Valid, 174 SdHoareTripleChecker+Invalid, 741 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 680 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 46 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-23 16:03:54,681 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [241 Valid, 174 Invalid, 741 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 680 Invalid, 0 Unknown, 46 Unchecked, 0.6s Time] [2022-11-23 16:03:54,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237 states. [2022-11-23 16:03:54,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237 to 236. [2022-11-23 16:03:54,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 233 states have (on average 1.184549356223176) internal successors, (276), 235 states have internal predecessors, (276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:54,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 276 transitions. [2022-11-23 16:03:54,687 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 276 transitions. Word has length 40 [2022-11-23 16:03:54,687 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:03:54,687 INFO L495 AbstractCegarLoop]: Abstraction has 236 states and 276 transitions. [2022-11-23 16:03:54,687 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:03:54,688 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 276 transitions. [2022-11-23 16:03:54,688 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-23 16:03:54,688 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:03:54,688 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:03:54,699 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-23 16:03:54,894 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-23 16:03:54,895 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:03:54,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:03:54,895 INFO L85 PathProgramCache]: Analyzing trace with hash 1463732113, now seen corresponding path program 5 times [2022-11-23 16:03:54,895 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:03:54,896 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1122703636] [2022-11-23 16:03:54,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:03:54,896 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:03:54,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:03:55,235 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 1 proven. 38 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:03:55,236 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:03:55,236 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1122703636] [2022-11-23 16:03:55,236 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1122703636] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:03:55,236 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1089057441] [2022-11-23 16:03:55,236 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 16:03:55,236 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:03:55,236 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:03:55,239 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:03:55,252 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-23 16:03:55,411 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-23 16:03:55,411 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:03:55,413 INFO L263 TraceCheckSpWp]: Trace formula consists of 287 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-23 16:03:55,415 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:03:55,745 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 35 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:03:55,746 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:03:56,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-23 16:03:56,147 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 35 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:03:56,148 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1089057441] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:03:56,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1254661255] [2022-11-23 16:03:56,149 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:03:56,150 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:03:56,150 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:03:56,150 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:03:56,150 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:03:56,178 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:03:56,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:03:56,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:03:56,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:56,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:56,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:56,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:03:56,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:56,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:03:56,506 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:03:56,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:03:56,757 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:04:01,106 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10870#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:04:01,106 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:04:01,106 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:04:01,106 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 11, 11] total 27 [2022-11-23 16:04:01,107 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2119040577] [2022-11-23 16:04:01,107 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:04:01,107 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-23 16:04:01,107 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:04:01,108 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-23 16:04:01,108 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=225, Invalid=1755, Unknown=0, NotChecked=0, Total=1980 [2022-11-23 16:04:01,108 INFO L87 Difference]: Start difference. First operand 236 states and 276 transitions. Second operand has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:01,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:04:01,711 INFO L93 Difference]: Finished difference Result 404 states and 464 transitions. [2022-11-23 16:04:01,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-23 16:04:01,711 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-23 16:04:01,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:04:01,713 INFO L225 Difference]: With dead ends: 404 [2022-11-23 16:04:01,713 INFO L226 Difference]: Without dead ends: 404 [2022-11-23 16:04:01,714 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 83 SyntacticMatches, 4 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 894 ImplicationChecksByTransitivity, 5.2s TimeCoverageRelationStatistics Valid=434, Invalid=2536, Unknown=0, NotChecked=0, Total=2970 [2022-11-23 16:04:01,714 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 743 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 366 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 743 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 391 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 366 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 16:04:01,714 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [743 Valid, 62 Invalid, 391 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 366 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 16:04:01,715 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 404 states. [2022-11-23 16:04:01,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 404 to 303. [2022-11-23 16:04:01,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 300 states have (on average 1.19) internal successors, (357), 302 states have internal predecessors, (357), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:01,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 357 transitions. [2022-11-23 16:04:01,722 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 357 transitions. Word has length 41 [2022-11-23 16:04:01,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:04:01,723 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 357 transitions. [2022-11-23 16:04:01,723 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:01,723 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 357 transitions. [2022-11-23 16:04:01,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-23 16:04:01,724 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:04:01,724 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:04:01,731 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-23 16:04:01,930 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-23 16:04:01,930 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:04:01,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:04:01,930 INFO L85 PathProgramCache]: Analyzing trace with hash 525396335, now seen corresponding path program 3 times [2022-11-23 16:04:01,930 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:04:01,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [80199820] [2022-11-23 16:04:01,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:04:01,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:04:01,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:04:02,330 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 1 proven. 37 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:04:02,331 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:04:02,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [80199820] [2022-11-23 16:04:02,331 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [80199820] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:04:02,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1863160210] [2022-11-23 16:04:02,331 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-23 16:04:02,331 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:04:02,331 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:04:02,347 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:04:02,374 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-23 16:04:02,514 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-23 16:04:02,514 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:04:02,517 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-23 16:04:02,518 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:04:02,781 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:04:02,782 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:04:03,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-23 16:04:03,148 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:04:03,149 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1863160210] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:04:03,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1790505496] [2022-11-23 16:04:03,150 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:04:03,150 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:04:03,151 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:04:03,151 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:04:03,151 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:04:03,179 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:04:03,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:04:03,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:03,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:03,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:03,324 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:04:03,372 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:03,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:03,438 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:04:03,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:04:04,716 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:04:07,723 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11885#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:04:07,723 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:04:07,723 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:04:07,723 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 24 [2022-11-23 16:04:07,723 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2004350906] [2022-11-23 16:04:07,723 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:04:07,724 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-23 16:04:07,724 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:04:07,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-23 16:04:07,724 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=185, Invalid=1537, Unknown=0, NotChecked=0, Total=1722 [2022-11-23 16:04:07,725 INFO L87 Difference]: Start difference. First operand 303 states and 357 transitions. Second operand has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:08,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:04:08,686 INFO L93 Difference]: Finished difference Result 351 states and 399 transitions. [2022-11-23 16:04:08,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-23 16:04:08,687 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-23 16:04:08,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:04:08,688 INFO L225 Difference]: With dead ends: 351 [2022-11-23 16:04:08,688 INFO L226 Difference]: Without dead ends: 351 [2022-11-23 16:04:08,689 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 90 SyntacticMatches, 4 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 900 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=522, Invalid=2900, Unknown=0, NotChecked=0, Total=3422 [2022-11-23 16:04:08,690 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 510 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 469 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 510 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 482 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 469 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-23 16:04:08,690 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [510 Valid, 75 Invalid, 482 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 469 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-23 16:04:08,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2022-11-23 16:04:08,695 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 303. [2022-11-23 16:04:08,696 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 300 states have (on average 1.1833333333333333) internal successors, (355), 302 states have internal predecessors, (355), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:08,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 355 transitions. [2022-11-23 16:04:08,697 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 355 transitions. Word has length 42 [2022-11-23 16:04:08,697 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:04:08,697 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 355 transitions. [2022-11-23 16:04:08,698 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:08,698 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 355 transitions. [2022-11-23 16:04:08,699 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-23 16:04:08,699 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:04:08,699 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:04:08,707 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-23 16:04:08,905 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-23 16:04:08,905 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:04:08,905 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:04:08,906 INFO L85 PathProgramCache]: Analyzing trace with hash -1182475613, now seen corresponding path program 6 times [2022-11-23 16:04:08,906 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:04:08,906 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [816212589] [2022-11-23 16:04:08,906 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:04:08,906 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:04:08,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:04:09,370 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 46 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:04:09,370 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:04:09,370 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [816212589] [2022-11-23 16:04:09,370 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [816212589] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:04:09,370 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1681690917] [2022-11-23 16:04:09,370 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-23 16:04:09,370 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:04:09,371 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:04:09,371 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:04:09,373 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-23 16:04:09,541 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-23 16:04:09,542 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:04:09,544 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 95 conjunts are in the unsatisfiable core [2022-11-23 16:04:09,546 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:04:09,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:10,049 INFO L321 Elim1Store]: treesize reduction 27, result has 25.0 percent of original size [2022-11-23 16:04:10,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 22 [2022-11-23 16:04:10,895 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-23 16:04:10,916 INFO L321 Elim1Store]: treesize reduction 40, result has 23.1 percent of original size [2022-11-23 16:04:10,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 56 treesize of output 35 [2022-11-23 16:04:10,954 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 54 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:04:10,954 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:04:11,600 INFO L321 Elim1Store]: treesize reduction 19, result has 53.7 percent of original size [2022-11-23 16:04:11,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 187 treesize of output 147 [2022-11-23 16:04:11,611 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:04:11,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 143 treesize of output 137 [2022-11-23 16:04:11,640 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-23 16:04:11,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 22 [2022-11-23 16:04:11,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-23 16:04:11,980 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 39 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:04:11,980 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1681690917] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:04:11,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [360526608] [2022-11-23 16:04:11,981 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:04:11,982 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:04:11,982 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:04:11,982 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:04:11,982 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:04:12,027 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:04:12,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:04:12,069 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:12,102 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:12,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:12,170 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:04:12,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:12,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:12,257 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:04:12,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:04:12,564 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:04:16,327 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12883#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:04:16,327 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:04:16,327 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:04:16,327 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 20, 17] total 47 [2022-11-23 16:04:16,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [708395471] [2022-11-23 16:04:16,328 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:04:16,328 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-23 16:04:16,328 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:04:16,329 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-23 16:04:16,329 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=3542, Unknown=0, NotChecked=0, Total=3782 [2022-11-23 16:04:16,330 INFO L87 Difference]: Start difference. First operand 303 states and 355 transitions. Second operand has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:25,146 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:04:25,146 INFO L93 Difference]: Finished difference Result 839 states and 949 transitions. [2022-11-23 16:04:25,147 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 66 states. [2022-11-23 16:04:25,147 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-23 16:04:25,147 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:04:25,150 INFO L225 Difference]: With dead ends: 839 [2022-11-23 16:04:25,150 INFO L226 Difference]: Without dead ends: 839 [2022-11-23 16:04:25,151 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 76 SyntacticMatches, 0 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3124 ImplicationChecksByTransitivity, 10.8s TimeCoverageRelationStatistics Valid=1374, Invalid=11966, Unknown=0, NotChecked=0, Total=13340 [2022-11-23 16:04:25,152 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 987 mSDsluCounter, 827 mSDsCounter, 0 mSdLazyCounter, 4092 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 987 SdHoareTripleChecker+Valid, 862 SdHoareTripleChecker+Invalid, 4107 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 4092 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2022-11-23 16:04:25,152 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [987 Valid, 862 Invalid, 4107 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 4092 Invalid, 0 Unknown, 0 Unchecked, 3.4s Time] [2022-11-23 16:04:25,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 839 states. [2022-11-23 16:04:25,163 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 839 to 355. [2022-11-23 16:04:25,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 352 states have (on average 1.1988636363636365) internal successors, (422), 354 states have internal predecessors, (422), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:25,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 422 transitions. [2022-11-23 16:04:25,165 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 422 transitions. Word has length 42 [2022-11-23 16:04:25,165 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:04:25,165 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 422 transitions. [2022-11-23 16:04:25,165 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:25,166 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 422 transitions. [2022-11-23 16:04:25,166 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-23 16:04:25,166 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:04:25,167 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:04:25,178 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-23 16:04:25,372 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-23 16:04:25,373 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:04:25,373 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:04:25,373 INFO L85 PathProgramCache]: Analyzing trace with hash -487556779, now seen corresponding path program 4 times [2022-11-23 16:04:25,373 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:04:25,373 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [726729583] [2022-11-23 16:04:25,373 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:04:25,374 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:04:25,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:04:25,777 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 1 proven. 43 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:04:25,777 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:04:25,777 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [726729583] [2022-11-23 16:04:25,777 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [726729583] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:04:25,777 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [846323502] [2022-11-23 16:04:25,777 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-23 16:04:25,778 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:04:25,778 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:04:25,779 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:04:25,806 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-23 16:04:25,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:04:25,940 INFO L263 TraceCheckSpWp]: Trace formula consists of 311 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-23 16:04:25,944 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:04:26,209 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:04:26,209 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:04:26,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-23 16:04:26,589 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:04:26,589 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [846323502] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:04:26,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2137948152] [2022-11-23 16:04:26,591 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:04:26,591 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:04:26,591 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:04:26,591 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:04:26,592 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:04:26,607 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:04:26,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:04:26,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:26,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:26,724 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:26,766 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:04:26,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:26,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:26,872 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:04:26,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:04:28,107 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:04:31,108 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14483#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:04:31,109 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:04:31,109 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:04:31,109 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 24 [2022-11-23 16:04:31,109 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [16823070] [2022-11-23 16:04:31,109 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:04:31,109 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-23 16:04:31,109 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:04:31,110 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-23 16:04:31,110 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=186, Invalid=1536, Unknown=0, NotChecked=0, Total=1722 [2022-11-23 16:04:31,110 INFO L87 Difference]: Start difference. First operand 355 states and 422 transitions. Second operand has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:32,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:04:32,065 INFO L93 Difference]: Finished difference Result 407 states and 465 transitions. [2022-11-23 16:04:32,066 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-23 16:04:32,066 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-11-23 16:04:32,066 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:04:32,068 INFO L225 Difference]: With dead ends: 407 [2022-11-23 16:04:32,068 INFO L226 Difference]: Without dead ends: 407 [2022-11-23 16:04:32,069 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 96 SyntacticMatches, 4 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 870 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=490, Invalid=2816, Unknown=0, NotChecked=0, Total=3306 [2022-11-23 16:04:32,069 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 568 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 447 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 568 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 461 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 447 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-23 16:04:32,069 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [568 Valid, 74 Invalid, 461 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 447 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-23 16:04:32,070 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 407 states. [2022-11-23 16:04:32,075 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 407 to 355. [2022-11-23 16:04:32,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 352 states have (on average 1.1903409090909092) internal successors, (419), 354 states have internal predecessors, (419), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:32,077 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 419 transitions. [2022-11-23 16:04:32,077 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 419 transitions. Word has length 44 [2022-11-23 16:04:32,077 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:04:32,077 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 419 transitions. [2022-11-23 16:04:32,078 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:32,078 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 419 transitions. [2022-11-23 16:04:32,079 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-23 16:04:32,079 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:04:32,079 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:04:32,086 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-23 16:04:32,285 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-23 16:04:32,285 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:04:32,286 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:04:32,286 INFO L85 PathProgramCache]: Analyzing trace with hash 1760874124, now seen corresponding path program 4 times [2022-11-23 16:04:32,286 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:04:32,286 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1025748659] [2022-11-23 16:04:32,286 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:04:32,286 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:04:32,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:04:32,741 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 4 proven. 58 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:04:32,741 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:04:32,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1025748659] [2022-11-23 16:04:32,742 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1025748659] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:04:32,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1589836358] [2022-11-23 16:04:32,742 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-23 16:04:32,742 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:04:32,742 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:04:32,743 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:04:32,745 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-23 16:04:32,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:04:32,892 INFO L263 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 38 conjunts are in the unsatisfiable core [2022-11-23 16:04:32,893 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:04:33,190 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 9 proven. 53 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:04:33,190 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:04:33,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-23 16:04:33,654 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 9 proven. 53 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:04:33,654 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1589836358] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:04:33,654 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1447039043] [2022-11-23 16:04:33,655 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:04:33,655 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:04:33,655 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:04:33,655 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:04:33,655 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:04:33,694 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:04:33,695 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:04:33,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:04:33,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:33,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:33,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:04:33,894 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-23 16:04:33,894 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-23 16:04:33,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:33,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:34,002 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:04:34,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:04:34,312 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:04:37,301 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15600#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:04:37,301 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:04:37,301 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:04:37,301 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 29 [2022-11-23 16:04:37,301 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2114417401] [2022-11-23 16:04:37,301 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:04:37,302 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-23 16:04:37,302 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:04:37,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-23 16:04:37,302 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1783, Unknown=0, NotChecked=0, Total=1980 [2022-11-23 16:04:37,302 INFO L87 Difference]: Start difference. First operand 355 states and 419 transitions. Second operand has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:38,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:04:38,520 INFO L93 Difference]: Finished difference Result 666 states and 773 transitions. [2022-11-23 16:04:38,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-23 16:04:38,521 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-23 16:04:38,521 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:04:38,523 INFO L225 Difference]: With dead ends: 666 [2022-11-23 16:04:38,523 INFO L226 Difference]: Without dead ends: 666 [2022-11-23 16:04:38,524 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 103 SyntacticMatches, 5 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 968 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=549, Invalid=3111, Unknown=0, NotChecked=0, Total=3660 [2022-11-23 16:04:38,524 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 379 mSDsluCounter, 160 mSDsCounter, 0 mSdLazyCounter, 820 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 379 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 824 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 820 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-23 16:04:38,525 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [379 Valid, 185 Invalid, 824 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 820 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-23 16:04:38,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 666 states. [2022-11-23 16:04:38,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 666 to 358. [2022-11-23 16:04:38,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 358 states, 355 states have (on average 1.1887323943661972) internal successors, (422), 357 states have internal predecessors, (422), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:38,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 358 states to 358 states and 422 transitions. [2022-11-23 16:04:38,534 INFO L78 Accepts]: Start accepts. Automaton has 358 states and 422 transitions. Word has length 47 [2022-11-23 16:04:38,535 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:04:38,535 INFO L495 AbstractCegarLoop]: Abstraction has 358 states and 422 transitions. [2022-11-23 16:04:38,535 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:04:38,535 INFO L276 IsEmpty]: Start isEmpty. Operand 358 states and 422 transitions. [2022-11-23 16:04:38,536 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-23 16:04:38,536 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:04:38,536 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:04:38,546 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2022-11-23 16:04:38,746 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-23 16:04:38,747 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:04:38,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:04:38,747 INFO L85 PathProgramCache]: Analyzing trace with hash 298207322, now seen corresponding path program 5 times [2022-11-23 16:04:38,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:04:38,747 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [818032716] [2022-11-23 16:04:38,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:04:38,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:04:38,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:04:40,099 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 57 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:04:40,100 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:04:40,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [818032716] [2022-11-23 16:04:40,100 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [818032716] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:04:40,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1383885173] [2022-11-23 16:04:40,100 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 16:04:40,100 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:04:40,100 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:04:40,102 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:04:40,134 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-23 16:04:40,352 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-23 16:04:40,352 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:04:40,356 INFO L263 TraceCheckSpWp]: Trace formula consists of 336 conjuncts, 84 conjunts are in the unsatisfiable core [2022-11-23 16:04:40,359 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:04:40,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-23 16:04:40,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-23 16:04:40,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-23 16:04:41,207 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:04:41,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 21 [2022-11-23 16:04:41,251 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 41 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:04:41,251 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:04:41,741 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (v_ArrVal_939 (Array Int Int))) (let ((.cse0 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_939))) (let ((.cse1 (select (select .cse0 |ULTIMATE.start_substring_~pt~0#1.base|) (+ 2 |c_ULTIMATE.start_main_~nondetString2~0#1.offset|)))) (or (not (= (select (select .cse0 |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) .cse1)) (= .cse1 0))))) is different from false [2022-11-23 16:04:41,750 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:04:41,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 46 [2022-11-23 16:04:41,775 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:04:41,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 123 treesize of output 122 [2022-11-23 16:04:41,790 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:04:41,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 74 treesize of output 64 [2022-11-23 16:04:42,332 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 41 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:04:42,333 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1383885173] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:04:42,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [562372473] [2022-11-23 16:04:42,334 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:04:42,334 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:04:42,335 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:04:42,335 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:04:42,335 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:04:42,355 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:04:42,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:04:42,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:42,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:42,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:42,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:42,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:42,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:04:42,614 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:04:42,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:04:43,911 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:04:47,675 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17002#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:04:47,675 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:04:47,675 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:04:47,676 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 17, 17] total 43 [2022-11-23 16:04:47,676 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [912443296] [2022-11-23 16:04:47,676 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:04:47,676 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-11-23 16:04:47,676 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:04:47,677 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-11-23 16:04:47,677 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=3185, Unknown=1, NotChecked=114, Total=3540 [2022-11-23 16:04:47,678 INFO L87 Difference]: Start difference. First operand 358 states and 422 transitions. Second operand has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:01,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:05:01,846 INFO L93 Difference]: Finished difference Result 647 states and 744 transitions. [2022-11-23 16:05:01,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-11-23 16:05:01,846 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-23 16:05:01,846 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:05:01,847 INFO L225 Difference]: With dead ends: 647 [2022-11-23 16:05:01,848 INFO L226 Difference]: Without dead ends: 647 [2022-11-23 16:05:01,848 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 106 SyntacticMatches, 6 SemanticMatches, 105 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 3131 ImplicationChecksByTransitivity, 17.6s TimeCoverageRelationStatistics Valid=1092, Invalid=10041, Unknown=1, NotChecked=208, Total=11342 [2022-11-23 16:05:01,848 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 948 mSDsluCounter, 502 mSDsCounter, 0 mSdLazyCounter, 2258 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 948 SdHoareTripleChecker+Valid, 533 SdHoareTripleChecker+Invalid, 2433 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 2258 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 166 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-23 16:05:01,849 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [948 Valid, 533 Invalid, 2433 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 2258 Invalid, 0 Unknown, 166 Unchecked, 1.8s Time] [2022-11-23 16:05:01,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 647 states. [2022-11-23 16:05:01,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 647 to 377. [2022-11-23 16:05:01,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 374 states have (on average 1.1844919786096257) internal successors, (443), 376 states have internal predecessors, (443), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:01,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 443 transitions. [2022-11-23 16:05:01,857 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 443 transitions. Word has length 49 [2022-11-23 16:05:01,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:05:01,858 INFO L495 AbstractCegarLoop]: Abstraction has 377 states and 443 transitions. [2022-11-23 16:05:01,858 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:01,858 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 443 transitions. [2022-11-23 16:05:01,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-23 16:05:01,859 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:05:01,859 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:05:01,870 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2022-11-23 16:05:02,065 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:05:02,066 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:05:02,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:05:02,066 INFO L85 PathProgramCache]: Analyzing trace with hash -17042882, now seen corresponding path program 7 times [2022-11-23 16:05:02,066 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:05:02,066 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [740633849] [2022-11-23 16:05:02,066 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:05:02,067 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:05:02,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:05:03,022 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 5 proven. 66 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:05:03,022 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:05:03,022 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [740633849] [2022-11-23 16:05:03,023 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [740633849] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:05:03,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1795417638] [2022-11-23 16:05:03,023 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-23 16:05:03,023 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:05:03,023 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:05:03,024 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:05:03,050 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-23 16:05:03,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:05:03,216 INFO L263 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-23 16:05:03,218 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:05:03,626 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:04,509 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-23 16:05:04,512 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:05:04,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-23 16:05:04,516 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:05:04,516 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:05:04,987 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-23 16:05:04,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2022-11-23 16:05:05,647 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:05:05,647 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1795417638] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:05:05,647 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1628799769] [2022-11-23 16:05:05,649 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:05:05,649 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:05:05,649 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:05:05,649 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:05:05,649 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:05:05,673 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:05:05,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:05:05,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:05:05,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:05,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:05,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:05,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:05:05,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:05,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:05,992 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:05:05,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:05:06,208 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:05:11,831 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18477#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:05:11,831 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:05:11,831 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:05:11,831 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 17, 17] total 48 [2022-11-23 16:05:11,831 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2041011495] [2022-11-23 16:05:11,831 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:05:11,832 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-23 16:05:11,832 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:05:11,832 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-23 16:05:11,832 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=217, Invalid=3689, Unknown=0, NotChecked=0, Total=3906 [2022-11-23 16:05:11,832 INFO L87 Difference]: Start difference. First operand 377 states and 443 transitions. Second operand has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:26,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:05:26,020 INFO L93 Difference]: Finished difference Result 1450 states and 1636 transitions. [2022-11-23 16:05:26,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 113 states. [2022-11-23 16:05:26,021 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-23 16:05:26,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:05:26,024 INFO L225 Difference]: With dead ends: 1450 [2022-11-23 16:05:26,024 INFO L226 Difference]: Without dead ends: 1430 [2022-11-23 16:05:26,026 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 102 SyntacticMatches, 1 SemanticMatches, 165 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7445 ImplicationChecksByTransitivity, 15.9s TimeCoverageRelationStatistics Valid=1927, Invalid=25795, Unknown=0, NotChecked=0, Total=27722 [2022-11-23 16:05:26,027 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 1712 mSDsluCounter, 2346 mSDsCounter, 0 mSdLazyCounter, 6669 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1712 SdHoareTripleChecker+Valid, 2435 SdHoareTripleChecker+Invalid, 6695 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 6669 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.7s IncrementalHoareTripleChecker+Time [2022-11-23 16:05:26,027 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1712 Valid, 2435 Invalid, 6695 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [26 Valid, 6669 Invalid, 0 Unknown, 0 Unchecked, 5.7s Time] [2022-11-23 16:05:26,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1430 states. [2022-11-23 16:05:26,041 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1430 to 564. [2022-11-23 16:05:26,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1871657754010696) internal successors, (666), 563 states have internal predecessors, (666), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:26,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 666 transitions. [2022-11-23 16:05:26,043 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 666 transitions. Word has length 49 [2022-11-23 16:05:26,043 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:05:26,043 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 666 transitions. [2022-11-23 16:05:26,044 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:26,044 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 666 transitions. [2022-11-23 16:05:26,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-23 16:05:26,045 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:05:26,045 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:05:26,055 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-23 16:05:26,251 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:05:26,251 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:05:26,252 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:05:26,252 INFO L85 PathProgramCache]: Analyzing trace with hash 999448052, now seen corresponding path program 6 times [2022-11-23 16:05:26,252 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:05:26,252 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1942411083] [2022-11-23 16:05:26,252 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:05:26,252 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:05:26,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:05:27,262 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:05:27,262 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:05:27,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1942411083] [2022-11-23 16:05:27,262 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1942411083] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:05:27,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1743533579] [2022-11-23 16:05:27,262 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-23 16:05:27,262 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:05:27,263 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:05:27,264 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:05:27,290 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-23 16:05:27,450 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-23 16:05:27,450 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:05:27,453 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 53 conjunts are in the unsatisfiable core [2022-11-23 16:05:27,456 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:05:27,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-23 16:05:27,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:27,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-23 16:05:28,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-23 16:05:28,015 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:05:28,015 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:05:28,183 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:05:28,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-23 16:05:28,192 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:05:28,192 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-23 16:05:28,403 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:05:28,403 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1743533579] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:05:28,403 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [329392345] [2022-11-23 16:05:28,404 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:05:28,405 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:05:28,405 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:05:28,405 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:05:28,405 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:05:28,431 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:05:28,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:05:28,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:28,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:28,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:28,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:05:28,593 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:28,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:28,650 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:05:28,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:05:29,107 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:05:33,556 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21037#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:05:33,556 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:05:33,556 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:05:33,556 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 13, 13] total 29 [2022-11-23 16:05:33,556 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [190862089] [2022-11-23 16:05:33,556 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:05:33,557 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-23 16:05:33,557 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:05:33,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-23 16:05:33,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=156, Invalid=1906, Unknown=8, NotChecked=0, Total=2070 [2022-11-23 16:05:33,562 INFO L87 Difference]: Start difference. First operand 564 states and 666 transitions. Second operand has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:35,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:05:35,020 INFO L93 Difference]: Finished difference Result 767 states and 886 transitions. [2022-11-23 16:05:35,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-23 16:05:35,020 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-23 16:05:35,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:05:35,023 INFO L225 Difference]: With dead ends: 767 [2022-11-23 16:05:35,023 INFO L226 Difference]: Without dead ends: 676 [2022-11-23 16:05:35,023 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 179 GetRequests, 118 SyntacticMatches, 3 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 655 ImplicationChecksByTransitivity, 6.3s TimeCoverageRelationStatistics Valid=302, Invalid=3230, Unknown=8, NotChecked=0, Total=3540 [2022-11-23 16:05:35,025 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 288 mSDsluCounter, 254 mSDsCounter, 0 mSdLazyCounter, 658 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 670 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 658 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-23 16:05:35,025 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 268 Invalid, 670 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 658 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-23 16:05:35,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 676 states. [2022-11-23 16:05:35,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 676 to 669. [2022-11-23 16:05:35,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 669 states, 666 states have (on average 1.1681681681681682) internal successors, (778), 668 states have internal predecessors, (778), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:35,036 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 669 states to 669 states and 778 transitions. [2022-11-23 16:05:35,036 INFO L78 Accepts]: Start accepts. Automaton has 669 states and 778 transitions. Word has length 50 [2022-11-23 16:05:35,036 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:05:35,036 INFO L495 AbstractCegarLoop]: Abstraction has 669 states and 778 transitions. [2022-11-23 16:05:35,036 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:35,037 INFO L276 IsEmpty]: Start isEmpty. Operand 669 states and 778 transitions. [2022-11-23 16:05:35,038 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-23 16:05:35,038 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:05:35,038 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-23 16:05:35,051 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Ended with exit code 0 [2022-11-23 16:05:35,244 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-11-23 16:05:35,245 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:05:35,245 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:05:35,245 INFO L85 PathProgramCache]: Analyzing trace with hash 49454004, now seen corresponding path program 6 times [2022-11-23 16:05:35,245 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:05:35,245 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807307065] [2022-11-23 16:05:35,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:05:35,245 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:05:35,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:05:36,435 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:05:36,435 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:05:36,435 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807307065] [2022-11-23 16:05:36,435 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807307065] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:05:36,435 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1409097102] [2022-11-23 16:05:36,435 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-23 16:05:36,436 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:05:36,436 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:05:36,437 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:05:36,466 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-23 16:05:36,643 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-23 16:05:36,644 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:05:36,647 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-23 16:05:36,650 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:05:36,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-23 16:05:36,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:37,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-23 16:05:37,399 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-11-23 16:05:37,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-11-23 16:05:37,403 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:05:37,403 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:05:37,556 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1077 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1077) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-23 16:05:37,564 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:05:37,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-23 16:05:37,573 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:05:37,573 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-23 16:05:37,836 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:05:37,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1409097102] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:05:37,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1354413124] [2022-11-23 16:05:37,838 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:05:37,838 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:05:37,839 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:05:37,839 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:05:37,839 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:05:37,871 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:05:37,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:05:37,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:05:37,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:37,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:38,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:05:38,059 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-23 16:05:38,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-23 16:05:38,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:38,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:38,164 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:05:38,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:05:39,403 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:05:42,938 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22854#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:05:42,938 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:05:42,938 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:05:42,938 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 17, 17] total 36 [2022-11-23 16:05:42,938 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [634748574] [2022-11-23 16:05:42,938 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:05:42,939 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-11-23 16:05:42,939 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:05:42,939 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-11-23 16:05:42,939 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=2465, Unknown=1, NotChecked=100, Total=2756 [2022-11-23 16:05:42,939 INFO L87 Difference]: Start difference. First operand 669 states and 778 transitions. Second operand has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:44,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:05:44,992 INFO L93 Difference]: Finished difference Result 645 states and 746 transitions. [2022-11-23 16:05:44,993 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-23 16:05:44,993 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-23 16:05:44,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:05:44,995 INFO L225 Difference]: With dead ends: 645 [2022-11-23 16:05:44,995 INFO L226 Difference]: Without dead ends: 468 [2022-11-23 16:05:44,995 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 192 GetRequests, 117 SyntacticMatches, 4 SemanticMatches, 71 ConstructedPredicates, 1 IntricatePredicates, 1 DeprecatedPredicates, 1073 ImplicationChecksByTransitivity, 6.1s TimeCoverageRelationStatistics Valid=457, Invalid=4658, Unknown=1, NotChecked=140, Total=5256 [2022-11-23 16:05:44,996 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 294 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 928 mSolverCounterSat, 14 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 294 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 1002 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 928 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 53 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-23 16:05:44,996 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [294 Valid, 293 Invalid, 1002 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 928 Invalid, 7 Unknown, 53 Unchecked, 0.7s Time] [2022-11-23 16:05:44,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 468 states. [2022-11-23 16:05:45,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 468 to 468. [2022-11-23 16:05:45,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 468 states, 465 states have (on average 1.1913978494623656) internal successors, (554), 467 states have internal predecessors, (554), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:45,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 554 transitions. [2022-11-23 16:05:45,004 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 554 transitions. Word has length 51 [2022-11-23 16:05:45,004 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:05:45,004 INFO L495 AbstractCegarLoop]: Abstraction has 468 states and 554 transitions. [2022-11-23 16:05:45,005 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:45,005 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 554 transitions. [2022-11-23 16:05:45,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-23 16:05:45,006 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:05:45,006 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:05:45,015 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-23 16:05:45,212 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-11-23 16:05:45,213 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:05:45,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:05:45,213 INFO L85 PathProgramCache]: Analyzing trace with hash 523030176, now seen corresponding path program 7 times [2022-11-23 16:05:45,213 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:05:45,213 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [756860345] [2022-11-23 16:05:45,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:05:45,213 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:05:45,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:05:45,683 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 4 proven. 60 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:05:45,684 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:05:45,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [756860345] [2022-11-23 16:05:45,684 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [756860345] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:05:45,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1539988768] [2022-11-23 16:05:45,684 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-23 16:05:45,701 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:05:45,701 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:05:45,703 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:05:45,708 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-23 16:05:45,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:05:45,916 INFO L263 TraceCheckSpWp]: Trace formula consists of 362 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-23 16:05:45,918 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:05:46,266 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 55 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:05:46,266 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:05:46,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-23 16:05:46,757 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 55 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 16:05:46,757 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1539988768] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:05:46,757 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1050280203] [2022-11-23 16:05:46,758 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:05:46,758 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:05:46,758 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:05:46,759 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:05:46,759 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:05:46,777 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:05:46,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:05:46,814 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:05:46,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:46,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:46,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:05:46,982 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-23 16:05:46,982 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-23 16:05:47,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:47,048 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:47,088 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:05:47,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:05:48,292 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:05:51,336 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24353#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:05:51,337 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:05:51,337 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:05:51,337 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 28 [2022-11-23 16:05:51,337 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1869979008] [2022-11-23 16:05:51,337 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:05:51,338 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-23 16:05:51,338 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:05:51,338 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-23 16:05:51,338 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=206, Invalid=1864, Unknown=0, NotChecked=0, Total=2070 [2022-11-23 16:05:51,338 INFO L87 Difference]: Start difference. First operand 468 states and 554 transitions. Second operand has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:52,640 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:05:52,640 INFO L93 Difference]: Finished difference Result 548 states and 628 transitions. [2022-11-23 16:05:52,640 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-23 16:05:52,640 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-23 16:05:52,640 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:05:52,643 INFO L225 Difference]: With dead ends: 548 [2022-11-23 16:05:52,643 INFO L226 Difference]: Without dead ends: 548 [2022-11-23 16:05:52,643 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 114 SyntacticMatches, 5 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1198 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=687, Invalid=3735, Unknown=0, NotChecked=0, Total=4422 [2022-11-23 16:05:52,643 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 692 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 648 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 692 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 667 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 648 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-23 16:05:52,643 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [692 Valid, 114 Invalid, 667 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 648 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-23 16:05:52,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 548 states. [2022-11-23 16:05:52,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 548 to 468. [2022-11-23 16:05:52,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 468 states, 465 states have (on average 1.1870967741935483) internal successors, (552), 467 states have internal predecessors, (552), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:52,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 552 transitions. [2022-11-23 16:05:52,652 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 552 transitions. Word has length 51 [2022-11-23 16:05:52,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:05:52,653 INFO L495 AbstractCegarLoop]: Abstraction has 468 states and 552 transitions. [2022-11-23 16:05:52,653 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:52,653 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 552 transitions. [2022-11-23 16:05:52,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-23 16:05:52,654 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:05:52,654 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:05:52,663 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Ended with exit code 0 [2022-11-23 16:05:52,860 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable44,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:05:52,861 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:05:52,861 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:05:52,861 INFO L85 PathProgramCache]: Analyzing trace with hash -620978066, now seen corresponding path program 7 times [2022-11-23 16:05:52,861 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:05:52,861 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [642999314] [2022-11-23 16:05:52,861 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:05:52,861 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:05:52,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:05:53,272 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 4 proven. 70 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:05:53,272 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:05:53,272 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [642999314] [2022-11-23 16:05:53,272 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [642999314] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:05:53,272 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [96920620] [2022-11-23 16:05:53,272 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-23 16:05:53,272 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:05:53,273 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:05:53,274 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:05:53,302 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-23 16:05:53,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:05:53,468 INFO L263 TraceCheckSpWp]: Trace formula consists of 348 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-23 16:05:53,470 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:05:53,833 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 65 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:05:53,833 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:05:54,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-23 16:05:54,256 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 65 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 16:05:54,257 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [96920620] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:05:54,257 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [355712982] [2022-11-23 16:05:54,258 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:05:54,258 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:05:54,258 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:05:54,258 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:05:54,258 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:05:54,278 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:05:54,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:05:54,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:05:54,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:54,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:54,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:05:54,500 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-23 16:05:54,501 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-23 16:05:54,547 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:54,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:05:54,606 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:05:54,606 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:05:55,044 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:05:59,050 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25761#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:05:59,050 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:05:59,051 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:05:59,051 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 26 [2022-11-23 16:05:59,051 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1525273267] [2022-11-23 16:05:59,051 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:05:59,051 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-23 16:05:59,051 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:05:59,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-23 16:05:59,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1684, Unknown=0, NotChecked=0, Total=1892 [2022-11-23 16:05:59,052 INFO L87 Difference]: Start difference. First operand 468 states and 552 transitions. Second operand has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:59,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:05:59,567 INFO L93 Difference]: Finished difference Result 665 states and 783 transitions. [2022-11-23 16:05:59,567 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-23 16:05:59,568 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-23 16:05:59,568 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:05:59,570 INFO L225 Difference]: With dead ends: 665 [2022-11-23 16:05:59,571 INFO L226 Difference]: Without dead ends: 665 [2022-11-23 16:05:59,571 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 118 SyntacticMatches, 5 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 793 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=359, Invalid=2293, Unknown=0, NotChecked=0, Total=2652 [2022-11-23 16:05:59,571 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 363 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 458 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 363 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 465 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 458 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 16:05:59,571 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [363 Valid, 103 Invalid, 465 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 458 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 16:05:59,572 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 665 states. [2022-11-23 16:05:59,577 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 665 to 564. [2022-11-23 16:05:59,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1942959001782532) internal successors, (670), 563 states have internal predecessors, (670), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:59,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 670 transitions. [2022-11-23 16:05:59,579 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 670 transitions. Word has length 52 [2022-11-23 16:05:59,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:05:59,580 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 670 transitions. [2022-11-23 16:05:59,580 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:05:59,580 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 670 transitions. [2022-11-23 16:05:59,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-23 16:05:59,581 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:05:59,581 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-23 16:05:59,598 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-23 16:05:59,787 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-11-23 16:05:59,788 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:05:59,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:05:59,788 INFO L85 PathProgramCache]: Analyzing trace with hash 1355851898, now seen corresponding path program 8 times [2022-11-23 16:05:59,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:05:59,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [786844137] [2022-11-23 16:05:59,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:05:59,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:05:59,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:06:00,260 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 4 proven. 66 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 16:06:00,260 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:06:00,260 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [786844137] [2022-11-23 16:06:00,260 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [786844137] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:06:00,260 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1289077032] [2022-11-23 16:06:00,260 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 16:06:00,260 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:06:00,261 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:06:00,267 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:06:00,290 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-23 16:06:00,510 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-23 16:06:00,510 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:06:00,513 INFO L263 TraceCheckSpWp]: Trace formula consists of 328 conjuncts, 96 conjunts are in the unsatisfiable core [2022-11-23 16:06:00,516 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:06:00,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-23 16:06:00,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:06:00,812 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-23 16:06:02,293 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:06:02,294 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:06:02,297 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:06:02,364 INFO L321 Elim1Store]: treesize reduction 34, result has 62.6 percent of original size [2022-11-23 16:06:02,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 4 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 14 case distinctions, treesize of input 78 treesize of output 88 [2022-11-23 16:06:02,625 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 0 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-23 16:06:02,625 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:06:04,976 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (v_ArrVal_1216 (Array Int Int)) (|v_ULTIMATE.start_substring_~pt~0#1.base_263| Int) (|v_ULTIMATE.start_substring_~ps2~0#1.offset_259| Int)) (let ((.cse3 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1216))) (let ((.cse1 (select .cse3 |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (.cse0 (select (select .cse3 |ULTIMATE.start_substring_~pt~0#1.base|) |c_ULTIMATE.start_main_~nondetString2~0#1.offset|)) (.cse2 (select (select .cse3 |v_ULTIMATE.start_substring_~pt~0#1.base_263|) (+ |c_ULTIMATE.start_main_~nondetString2~0#1.offset| 1)))) (or (not (= .cse0 (select .cse1 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)))) (<= (+ 2 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|) (select |c_#length| |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (= (select .cse1 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0) (not (= .cse2 (select .cse1 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|))) (not (<= |v_ULTIMATE.start_substring_~ps2~0#1.offset_259| (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|))) (not (<= 0 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|)) (= .cse0 0) (= .cse2 0))))) is different from false [2022-11-23 16:06:05,006 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:06:05,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 152 treesize of output 86 [2022-11-23 16:06:05,143 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:06:05,143 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 1 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 14 case distinctions, treesize of input 239 treesize of output 328 [2022-11-23 16:06:05,236 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:06:05,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 2 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 8 case distinctions, treesize of input 148 treesize of output 190 [2022-11-23 16:06:05,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-23 16:06:30,186 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 0 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-23 16:06:30,186 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1289077032] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:06:30,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1168125494] [2022-11-23 16:06:30,188 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:06:30,188 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:06:30,188 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:06:30,188 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:06:30,188 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:06:30,216 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:06:30,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:06:30,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:06:30,296 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:06:30,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:06:30,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:06:30,442 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-23 16:06:30,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-23 16:06:30,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:06:30,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:06:30,556 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:06:30,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:06:31,871 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:06:36,213 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27386#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:06:36,213 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:06:36,213 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:06:36,214 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 19, 19] total 50 [2022-11-23 16:06:36,214 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1490827448] [2022-11-23 16:06:36,214 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:06:36,214 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-11-23 16:06:36,215 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:06:36,215 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-11-23 16:06:36,215 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=310, Invalid=4115, Unknown=1, NotChecked=130, Total=4556 [2022-11-23 16:06:36,216 INFO L87 Difference]: Start difference. First operand 564 states and 670 transitions. Second operand has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:07:08,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:07:08,821 INFO L93 Difference]: Finished difference Result 699 states and 788 transitions. [2022-11-23 16:07:08,821 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 82 states. [2022-11-23 16:07:08,822 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-23 16:07:08,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:07:08,825 INFO L225 Difference]: With dead ends: 699 [2022-11-23 16:07:08,825 INFO L226 Difference]: Without dead ends: 699 [2022-11-23 16:07:08,826 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 250 GetRequests, 103 SyntacticMatches, 1 SemanticMatches, 146 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 6001 ImplicationChecksByTransitivity, 35.8s TimeCoverageRelationStatistics Valid=3326, Invalid=18139, Unknown=1, NotChecked=290, Total=21756 [2022-11-23 16:07:08,826 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 1664 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 1644 mSolverCounterSat, 99 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1664 SdHoareTripleChecker+Valid, 77 SdHoareTripleChecker+Invalid, 1839 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 1644 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 96 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2022-11-23 16:07:08,827 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1664 Valid, 77 Invalid, 1839 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [99 Valid, 1644 Invalid, 0 Unknown, 96 Unchecked, 4.2s Time] [2022-11-23 16:07:08,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 699 states. [2022-11-23 16:07:08,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 699 to 564. [2022-11-23 16:07:08,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1800356506238858) internal successors, (662), 563 states have internal predecessors, (662), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:07:08,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 662 transitions. [2022-11-23 16:07:08,837 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 662 transitions. Word has length 53 [2022-11-23 16:07:08,837 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:07:08,837 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 662 transitions. [2022-11-23 16:07:08,837 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:07:08,838 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 662 transitions. [2022-11-23 16:07:08,839 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-23 16:07:08,839 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:07:08,839 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:07:08,847 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-23 16:07:09,045 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-11-23 16:07:09,045 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:07:09,046 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:07:09,046 INFO L85 PathProgramCache]: Analyzing trace with hash -563151082, now seen corresponding path program 8 times [2022-11-23 16:07:09,046 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:07:09,046 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [750551805] [2022-11-23 16:07:09,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:07:09,046 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:07:09,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:07:09,625 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-23 16:07:09,625 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:07:09,625 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [750551805] [2022-11-23 16:07:09,625 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [750551805] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:07:09,625 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1825525107] [2022-11-23 16:07:09,625 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 16:07:09,626 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:07:09,626 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:07:09,627 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:07:09,650 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-23 16:07:09,985 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-23 16:07:09,986 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:07:09,988 INFO L263 TraceCheckSpWp]: Trace formula consists of 386 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-23 16:07:09,990 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:07:10,350 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-23 16:07:10,350 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:07:10,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-23 16:07:10,820 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-23 16:07:10,820 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1825525107] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:07:10,820 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1064832366] [2022-11-23 16:07:10,822 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:07:10,822 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:07:10,822 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:07:10,822 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:07:10,822 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:07:10,856 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:07:10,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:07:10,889 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:10,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:10,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:10,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:11,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:11,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:11,082 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:07:11,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:07:11,493 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:07:14,440 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29176#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:07:14,440 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:07:14,440 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:07:14,440 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 37 [2022-11-23 16:07:14,440 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [930847701] [2022-11-23 16:07:14,440 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:07:14,441 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-11-23 16:07:14,441 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:07:14,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-11-23 16:07:14,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=303, Invalid=2349, Unknown=0, NotChecked=0, Total=2652 [2022-11-23 16:07:14,442 INFO L87 Difference]: Start difference. First operand 564 states and 662 transitions. Second operand has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:07:15,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:07:15,527 INFO L93 Difference]: Finished difference Result 738 states and 843 transitions. [2022-11-23 16:07:15,527 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-23 16:07:15,528 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-23 16:07:15,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:07:15,530 INFO L225 Difference]: With dead ends: 738 [2022-11-23 16:07:15,530 INFO L226 Difference]: Without dead ends: 738 [2022-11-23 16:07:15,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 115 SyntacticMatches, 6 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1411 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=606, Invalid=3554, Unknown=0, NotChecked=0, Total=4160 [2022-11-23 16:07:15,531 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 591 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 950 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 591 SdHoareTripleChecker+Valid, 321 SdHoareTripleChecker+Invalid, 969 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 950 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-23 16:07:15,532 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [591 Valid, 321 Invalid, 969 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 950 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-23 16:07:15,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 738 states. [2022-11-23 16:07:15,541 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 738 to 586. [2022-11-23 16:07:15,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 586 states, 583 states have (on average 1.1886792452830188) internal successors, (693), 585 states have internal predecessors, (693), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:07:15,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 586 states to 586 states and 693 transitions. [2022-11-23 16:07:15,543 INFO L78 Accepts]: Start accepts. Automaton has 586 states and 693 transitions. Word has length 53 [2022-11-23 16:07:15,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:07:15,543 INFO L495 AbstractCegarLoop]: Abstraction has 586 states and 693 transitions. [2022-11-23 16:07:15,544 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:07:15,544 INFO L276 IsEmpty]: Start isEmpty. Operand 586 states and 693 transitions. [2022-11-23 16:07:15,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-23 16:07:15,545 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:07:15,545 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:07:15,555 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-23 16:07:15,751 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-11-23 16:07:15,752 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:07:15,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:07:15,752 INFO L85 PathProgramCache]: Analyzing trace with hash 1154445308, now seen corresponding path program 9 times [2022-11-23 16:07:15,752 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:07:15,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [982429736] [2022-11-23 16:07:15,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:07:15,752 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:07:15,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:07:16,263 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 4 proven. 76 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:07:16,263 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:07:16,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [982429736] [2022-11-23 16:07:16,263 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [982429736] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:07:16,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [787031483] [2022-11-23 16:07:16,263 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-23 16:07:16,264 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:07:16,264 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:07:16,265 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:07:16,294 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-23 16:07:16,524 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-23 16:07:16,524 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:07:16,527 INFO L263 TraceCheckSpWp]: Trace formula consists of 372 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-23 16:07:16,529 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:07:16,909 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:07:16,909 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:07:17,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-23 16:07:17,409 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 16:07:17,409 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [787031483] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:07:17,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [689597205] [2022-11-23 16:07:17,411 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:07:17,411 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:07:17,412 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:07:17,412 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:07:17,412 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:07:17,432 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:07:17,433 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:07:17,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:17,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:17,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:17,567 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:17,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:17,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:17,657 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:07:17,657 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:07:18,919 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:07:21,989 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '30894#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:07:21,989 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:07:21,990 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:07:21,990 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 28 [2022-11-23 16:07:21,990 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [139853425] [2022-11-23 16:07:21,990 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:07:21,990 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-23 16:07:21,990 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:07:21,991 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-23 16:07:21,991 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1862, Unknown=0, NotChecked=0, Total=2070 [2022-11-23 16:07:21,991 INFO L87 Difference]: Start difference. First operand 586 states and 693 transitions. Second operand has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:07:23,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:07:23,208 INFO L93 Difference]: Finished difference Result 672 states and 767 transitions. [2022-11-23 16:07:23,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-23 16:07:23,208 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-11-23 16:07:23,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:07:23,211 INFO L225 Difference]: With dead ends: 672 [2022-11-23 16:07:23,211 INFO L226 Difference]: Without dead ends: 672 [2022-11-23 16:07:23,211 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 126 SyntacticMatches, 5 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1132 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=615, Invalid=3545, Unknown=0, NotChecked=0, Total=4160 [2022-11-23 16:07:23,212 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 1025 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 719 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1025 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 736 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 719 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-23 16:07:23,212 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1025 Valid, 115 Invalid, 736 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 719 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-23 16:07:23,213 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 672 states. [2022-11-23 16:07:23,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 672 to 586. [2022-11-23 16:07:23,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 586 states, 583 states have (on average 1.1818181818181819) internal successors, (689), 585 states have internal predecessors, (689), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:07:23,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 586 states to 586 states and 689 transitions. [2022-11-23 16:07:23,222 INFO L78 Accepts]: Start accepts. Automaton has 586 states and 689 transitions. Word has length 55 [2022-11-23 16:07:23,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:07:23,222 INFO L495 AbstractCegarLoop]: Abstraction has 586 states and 689 transitions. [2022-11-23 16:07:23,223 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:07:23,223 INFO L276 IsEmpty]: Start isEmpty. Operand 586 states and 689 transitions. [2022-11-23 16:07:23,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-23 16:07:23,224 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:07:23,224 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:07:23,238 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-23 16:07:23,430 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-23 16:07:23,430 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:07:23,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:07:23,431 INFO L85 PathProgramCache]: Analyzing trace with hash -690235405, now seen corresponding path program 5 times [2022-11-23 16:07:23,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:07:23,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1809052303] [2022-11-23 16:07:23,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:07:23,431 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:07:23,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:07:23,958 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 9 proven. 86 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-23 16:07:23,958 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:07:23,958 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1809052303] [2022-11-23 16:07:23,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1809052303] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:07:23,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [150538815] [2022-11-23 16:07:23,959 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 16:07:23,959 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:07:23,959 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:07:23,960 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:07:23,962 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-23 16:07:24,285 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-23 16:07:24,285 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:07:24,288 INFO L263 TraceCheckSpWp]: Trace formula consists of 400 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-23 16:07:24,290 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:07:24,319 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-23 16:07:24,319 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-23 16:07:24,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-23 16:07:36,351 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-23 16:07:36,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 35 treesize of output 17 [2022-11-23 16:07:36,407 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 65 proven. 30 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-23 16:07:36,407 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:07:37,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-23 16:07:37,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-23 16:07:38,198 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 60 proven. 35 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-23 16:07:38,198 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [150538815] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:07:38,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [318539278] [2022-11-23 16:07:38,200 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-23 16:07:38,200 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:07:38,201 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:07:38,201 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:07:38,201 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:07:38,226 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:07:38,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:07:38,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:07:38,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:38,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:38,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:38,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:07:38,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:38,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:07:38,544 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:07:38,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:07:38,782 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:07:44,595 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '32585#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:07:44,596 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:07:44,596 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:07:44,596 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 18, 18] total 48 [2022-11-23 16:07:44,596 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [550882382] [2022-11-23 16:07:44,596 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:07:44,596 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-23 16:07:44,596 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:07:44,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-23 16:07:44,597 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=310, Invalid=3589, Unknown=7, NotChecked=0, Total=3906 [2022-11-23 16:07:44,597 INFO L87 Difference]: Start difference. First operand 586 states and 689 transitions. Second operand has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:08:58,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:08:58,696 INFO L93 Difference]: Finished difference Result 1854 states and 2065 transitions. [2022-11-23 16:08:58,697 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 131 states. [2022-11-23 16:08:58,697 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-11-23 16:08:58,697 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:08:58,700 INFO L225 Difference]: With dead ends: 1854 [2022-11-23 16:08:58,700 INFO L226 Difference]: Without dead ends: 1836 [2022-11-23 16:08:58,702 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 309 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 190 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10819 ImplicationChecksByTransitivity, 86.0s TimeCoverageRelationStatistics Valid=6069, Invalid=30589, Unknown=14, NotChecked=0, Total=36672 [2022-11-23 16:08:58,702 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 1521 mSDsluCounter, 641 mSDsCounter, 0 mSdLazyCounter, 3305 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1521 SdHoareTripleChecker+Valid, 669 SdHoareTripleChecker+Invalid, 3332 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 3305 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2022-11-23 16:08:58,702 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1521 Valid, 669 Invalid, 3332 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 3305 Invalid, 0 Unknown, 0 Unchecked, 5.9s Time] [2022-11-23 16:08:58,704 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1836 states. [2022-11-23 16:08:58,715 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1836 to 741. [2022-11-23 16:08:58,716 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 741 states, 738 states have (on average 1.1856368563685638) internal successors, (875), 740 states have internal predecessors, (875), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:08:58,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 741 states to 741 states and 875 transitions. [2022-11-23 16:08:58,717 INFO L78 Accepts]: Start accepts. Automaton has 741 states and 875 transitions. Word has length 56 [2022-11-23 16:08:58,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:08:58,718 INFO L495 AbstractCegarLoop]: Abstraction has 741 states and 875 transitions. [2022-11-23 16:08:58,718 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:08:58,718 INFO L276 IsEmpty]: Start isEmpty. Operand 741 states and 875 transitions. [2022-11-23 16:08:58,719 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-23 16:08:58,720 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:08:58,720 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:08:58,727 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-11-23 16:08:58,926 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-23 16:08:58,926 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:08:58,927 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:08:58,927 INFO L85 PathProgramCache]: Analyzing trace with hash 316753893, now seen corresponding path program 10 times [2022-11-23 16:08:58,927 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:08:58,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1580529404] [2022-11-23 16:08:58,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:08:58,927 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:08:58,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:09:00,491 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 93 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 16:09:00,492 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:09:00,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1580529404] [2022-11-23 16:09:00,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1580529404] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:09:00,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [134870737] [2022-11-23 16:09:00,492 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-23 16:09:00,492 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:09:00,492 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:09:00,493 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:09:00,495 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-23 16:09:00,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:09:00,703 INFO L263 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-23 16:09:00,705 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:09:01,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:09:01,109 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:09:01,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:09:01,589 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-11-23 16:09:01,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-11-23 16:09:01,593 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 68 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-23 16:09:01,593 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:09:01,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-23 16:09:02,123 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 68 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-23 16:09:02,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [134870737] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 16:09:02,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [320376785] [2022-11-23 16:09:02,125 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-23 16:09:02,125 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 16:09:02,125 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 16:09:02,125 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 16:09:02,126 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 16:09:02,149 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-23 16:09:02,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-23 16:09:02,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-23 16:09:02,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:09:02,267 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:09:02,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:09:02,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-23 16:09:02,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:09:02,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:09:02,472 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-23 16:09:02,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-23 16:09:03,001 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 16:09:07,530 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '35839#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-23 16:09:07,530 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 16:09:07,530 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 16:09:07,530 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 19, 19] total 44 [2022-11-23 16:09:07,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1708719024] [2022-11-23 16:09:07,530 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 16:09:07,530 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-11-23 16:09:07,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 16:09:07,531 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-11-23 16:09:07,531 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=236, Invalid=3424, Unknown=0, NotChecked=0, Total=3660 [2022-11-23 16:09:07,531 INFO L87 Difference]: Start difference. First operand 741 states and 875 transitions. Second operand has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:09:23,670 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 16:09:23,671 INFO L93 Difference]: Finished difference Result 1417 states and 1644 transitions. [2022-11-23 16:09:23,671 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 71 states. [2022-11-23 16:09:23,671 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-11-23 16:09:23,672 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 16:09:23,675 INFO L225 Difference]: With dead ends: 1417 [2022-11-23 16:09:23,675 INFO L226 Difference]: Without dead ends: 1417 [2022-11-23 16:09:23,676 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 137 SyntacticMatches, 4 SemanticMatches, 122 ConstructedPredicates, 0 IntricatePredicates, 2 DeprecatedPredicates, 3971 ImplicationChecksByTransitivity, 15.1s TimeCoverageRelationStatistics Valid=1402, Invalid=13850, Unknown=0, NotChecked=0, Total=15252 [2022-11-23 16:09:23,677 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 1436 mSDsluCounter, 888 mSDsCounter, 0 mSdLazyCounter, 3899 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1436 SdHoareTripleChecker+Valid, 937 SdHoareTripleChecker+Invalid, 3926 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 3899 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.1s IncrementalHoareTripleChecker+Time [2022-11-23 16:09:23,677 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1436 Valid, 937 Invalid, 3926 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 3899 Invalid, 0 Unknown, 0 Unchecked, 7.1s Time] [2022-11-23 16:09:23,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1417 states. [2022-11-23 16:09:23,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1417 to 817. [2022-11-23 16:09:23,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 817 states, 814 states have (on average 1.1805896805896805) internal successors, (961), 816 states have internal predecessors, (961), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:09:23,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 817 states to 817 states and 961 transitions. [2022-11-23 16:09:23,690 INFO L78 Accepts]: Start accepts. Automaton has 817 states and 961 transitions. Word has length 58 [2022-11-23 16:09:23,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 16:09:23,690 INFO L495 AbstractCegarLoop]: Abstraction has 817 states and 961 transitions. [2022-11-23 16:09:23,691 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 16:09:23,691 INFO L276 IsEmpty]: Start isEmpty. Operand 817 states and 961 transitions. [2022-11-23 16:09:23,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-23 16:09:23,692 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 16:09:23,693 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 16:09:23,704 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-23 16:09:23,899 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:09:23,899 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-23 16:09:23,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 16:09:23,899 INFO L85 PathProgramCache]: Analyzing trace with hash -175738785, now seen corresponding path program 11 times [2022-11-23 16:09:23,899 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 16:09:23,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1731890431] [2022-11-23 16:09:23,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 16:09:23,900 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 16:09:23,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 16:09:24,456 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 9 proven. 88 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-23 16:09:24,456 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 16:09:24,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1731890431] [2022-11-23 16:09:24,457 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1731890431] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 16:09:24,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1275560264] [2022-11-23 16:09:24,457 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-23 16:09:24,457 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 16:09:24,457 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 16:09:24,458 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 16:09:24,462 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ecd02bb-7668-458c-adcf-ab1aab79ee37/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-23 16:09:24,828 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-23 16:09:24,828 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 16:09:24,832 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 81 conjunts are in the unsatisfiable core [2022-11-23 16:09:24,838 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 16:09:24,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-23 16:09:25,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-23 16:09:25,118 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-23 16:10:13,852 INFO L321 Elim1Store]: treesize reduction 22, result has 82.4 percent of original size [2022-11-23 16:10:13,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 67 treesize of output 130 [2022-11-23 16:10:15,153 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 7 proven. 71 refuted. 4 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-23 16:10:15,153 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 16:10:25,227 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (|v_ULTIMATE.start_substring_~ps2~0#1.offset_335| Int) (v_ArrVal_1499 (Array Int Int)) (|v_ULTIMATE.start_substring_~pt~0#1.offset_346| Int) (|ULTIMATE.start_substring_~pt~0#1.offset| Int) (|v_ULTIMATE.start_substring_~ps2~0#1.offset_336| Int) (|v_ULTIMATE.start_substring_~ps2~0#1.offset_337| Int) (|v_ULTIMATE.start_substring_~pt~0#1.base_346| Int) (|v_ULTIMATE.start_substring_~pt~0#1.base_344| Int) (|v_ULTIMATE.start_substring_~pt~0#1.offset_344| Int)) (let ((.cse4 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1499))) (let ((.cse3 (select (select .cse4 |v_ULTIMATE.start_substring_~pt~0#1.base_344|) |v_ULTIMATE.start_substring_~pt~0#1.offset_344|)) (.cse2 (select (select .cse4 |v_ULTIMATE.start_substring_~pt~0#1.base_346|) |v_ULTIMATE.start_substring_~pt~0#1.offset_346|)) (.cse1 (select .cse4 |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (.cse0 (select (select .cse4 |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|))) (or (not (<= |v_ULTIMATE.start_substring_~ps2~0#1.offset_335| (+ |v_ULTIMATE.start_substring_~ps2~0#1.offset_336| 1))) (<= (+ 2 |v_ULTIMATE.start_substring_~ps2~0#1.offset_335|) (select |c_#length| |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (< (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|) |v_ULTIMATE.start_substring_~ps2~0#1.offset_337|) (not (= .cse0 (select .cse1 |v_ULTIMATE.start_substring_~ps2~0#1.offset_337|))) (= .cse2 0) (not (= (select .cse1 |v_ULTIMATE.start_substring_~ps2~0#1.offset_335|) .cse3)) (= .cse3 0) (not (= .cse2 (select .cse1 |v_ULTIMATE.start_substring_~ps2~0#1.offset_336|))) (not (<= |v_ULTIMATE.start_substring_~ps2~0#1.offset_336| (+ |v_ULTIMATE.start_substring_~ps2~0#1.offset_337| 1))) (not (<= 0 |v_ULTIMATE.start_substring_~ps2~0#1.offset_335|)) (= .cse0 0))))) is different from false [2022-11-23 16:10:25,268 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:10:25,269 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 184 treesize of output 96 [2022-11-23 16:10:25,609 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:10:25,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 285 treesize of output 455 [2022-11-23 16:10:25,973 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-23 16:10:25,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 190 treesize of output 280 [2022-11-23 16:10:26,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12