./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bfd8ca9d9dda86f57445168715d124831c95b647e7c1b1093bb129b0384cce9e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 23:51:19,891 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 23:51:19,893 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 23:51:19,912 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 23:51:19,913 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 23:51:19,914 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 23:51:19,931 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 23:51:19,933 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 23:51:19,934 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 23:51:19,935 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 23:51:19,937 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 23:51:19,938 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 23:51:19,938 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 23:51:19,939 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 23:51:19,941 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 23:51:19,942 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 23:51:19,943 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 23:51:19,944 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 23:51:19,946 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 23:51:19,948 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 23:51:19,949 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 23:51:19,952 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 23:51:19,953 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 23:51:19,954 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 23:51:19,958 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 23:51:19,958 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 23:51:19,959 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 23:51:19,960 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 23:51:19,960 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 23:51:19,961 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 23:51:19,962 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 23:51:19,963 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 23:51:19,964 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 23:51:19,965 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 23:51:19,966 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 23:51:19,976 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 23:51:19,978 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 23:51:19,978 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 23:51:19,979 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 23:51:19,982 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 23:51:19,983 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 23:51:19,984 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-25 23:51:20,015 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 23:51:20,015 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 23:51:20,015 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 23:51:20,015 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 23:51:20,016 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 23:51:20,016 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 23:51:20,017 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-25 23:51:20,017 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-25 23:51:20,017 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-25 23:51:20,017 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-25 23:51:20,017 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-25 23:51:20,017 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-25 23:51:20,018 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-25 23:51:20,018 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-25 23:51:20,018 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-25 23:51:20,018 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-25 23:51:20,019 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-25 23:51:20,019 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-25 23:51:20,019 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 23:51:20,020 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 23:51:20,020 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 23:51:20,020 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 23:51:20,020 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-25 23:51:20,020 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 23:51:20,021 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 23:51:20,021 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 23:51:20,021 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-25 23:51:20,021 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-25 23:51:20,021 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-25 23:51:20,022 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 23:51:20,022 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-25 23:51:20,022 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 23:51:20,022 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 23:51:20,022 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 23:51:20,023 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 23:51:20,023 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 23:51:20,023 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 23:51:20,023 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-25 23:51:20,023 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 23:51:20,023 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-25 23:51:20,024 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 23:51:20,024 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-25 23:51:20,024 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bfd8ca9d9dda86f57445168715d124831c95b647e7c1b1093bb129b0384cce9e [2022-11-25 23:51:20,365 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 23:51:20,389 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 23:51:20,391 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 23:51:20,393 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 23:51:20,393 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 23:51:20,394 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i [2022-11-25 23:51:23,482 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 23:51:23,765 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 23:51:23,766 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i [2022-11-25 23:51:23,785 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/data/4b2f756e1/1e6b3a2aa4484ab6bcc65ff60a92aff2/FLAGecfa07dfb [2022-11-25 23:51:23,804 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/data/4b2f756e1/1e6b3a2aa4484ab6bcc65ff60a92aff2 [2022-11-25 23:51:23,809 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 23:51:23,811 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 23:51:23,818 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 23:51:23,818 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 23:51:23,822 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 23:51:23,824 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 11:51:23" (1/1) ... [2022-11-25 23:51:23,825 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@292407a5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:23, skipping insertion in model container [2022-11-25 23:51:23,826 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 11:51:23" (1/1) ... [2022-11-25 23:51:23,834 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 23:51:23,885 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 23:51:24,226 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 23:51:24,238 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 23:51:24,296 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 23:51:24,322 INFO L208 MainTranslator]: Completed translation [2022-11-25 23:51:24,322 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24 WrapperNode [2022-11-25 23:51:24,323 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 23:51:24,324 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 23:51:24,324 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 23:51:24,324 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 23:51:24,332 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (1/1) ... [2022-11-25 23:51:24,345 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (1/1) ... [2022-11-25 23:51:24,368 INFO L138 Inliner]: procedures = 117, calls = 16, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 94 [2022-11-25 23:51:24,369 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 23:51:24,369 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 23:51:24,370 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 23:51:24,370 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 23:51:24,380 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (1/1) ... [2022-11-25 23:51:24,380 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (1/1) ... [2022-11-25 23:51:24,383 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (1/1) ... [2022-11-25 23:51:24,384 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (1/1) ... [2022-11-25 23:51:24,391 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (1/1) ... [2022-11-25 23:51:24,395 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (1/1) ... [2022-11-25 23:51:24,397 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (1/1) ... [2022-11-25 23:51:24,398 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (1/1) ... [2022-11-25 23:51:24,401 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 23:51:24,402 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 23:51:24,402 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 23:51:24,402 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 23:51:24,403 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (1/1) ... [2022-11-25 23:51:24,410 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 23:51:24,424 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:51:24,443 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 23:51:24,466 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 23:51:24,506 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-25 23:51:24,507 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-25 23:51:24,507 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-25 23:51:24,508 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-25 23:51:24,508 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 23:51:24,508 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 23:51:24,618 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 23:51:24,620 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 23:51:24,862 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 23:51:24,953 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 23:51:24,953 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-25 23:51:24,956 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 11:51:24 BoogieIcfgContainer [2022-11-25 23:51:24,956 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 23:51:24,959 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 23:51:24,959 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 23:51:24,977 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 23:51:24,978 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 11:51:23" (1/3) ... [2022-11-25 23:51:24,979 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@d1c04df and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 11:51:24, skipping insertion in model container [2022-11-25 23:51:24,979 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:51:24" (2/3) ... [2022-11-25 23:51:24,979 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@d1c04df and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 11:51:24, skipping insertion in model container [2022-11-25 23:51:24,979 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 11:51:24" (3/3) ... [2022-11-25 23:51:24,981 INFO L112 eAbstractionObserver]: Analyzing ICFG cstrcat-alloca-2.i [2022-11-25 23:51:25,019 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 23:51:25,019 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 15 error locations. [2022-11-25 23:51:25,084 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 23:51:25,092 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@d560543, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 23:51:25,092 INFO L358 AbstractCegarLoop]: Starting to check reachability of 15 error locations. [2022-11-25 23:51:25,098 INFO L276 IsEmpty]: Start isEmpty. Operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:25,105 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-25 23:51:25,105 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:25,106 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-25 23:51:25,107 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:25,118 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:25,118 INFO L85 PathProgramCache]: Analyzing trace with hash 147851, now seen corresponding path program 1 times [2022-11-25 23:51:25,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:25,132 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1036924218] [2022-11-25 23:51:25,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:25,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:25,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:25,390 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:25,391 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:25,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1036924218] [2022-11-25 23:51:25,392 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1036924218] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:25,392 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:51:25,392 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-25 23:51:25,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [410933706] [2022-11-25 23:51:25,395 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:25,400 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 23:51:25,400 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:25,440 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 23:51:25,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:51:25,443 INFO L87 Difference]: Start difference. First operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:25,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:25,516 INFO L93 Difference]: Finished difference Result 33 states and 37 transitions. [2022-11-25 23:51:25,517 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:51:25,519 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-25 23:51:25,519 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:25,528 INFO L225 Difference]: With dead ends: 33 [2022-11-25 23:51:25,528 INFO L226 Difference]: Without dead ends: 31 [2022-11-25 23:51:25,530 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:51:25,534 INFO L413 NwaCegarLoop]: 27 mSDtfsCounter, 1 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:25,536 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 41 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:51:25,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-11-25 23:51:25,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2022-11-25 23:51:25,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 16 states have (on average 2.125) internal successors, (34), 30 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:25,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 34 transitions. [2022-11-25 23:51:25,574 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 34 transitions. Word has length 3 [2022-11-25 23:51:25,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:25,574 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 34 transitions. [2022-11-25 23:51:25,575 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:25,575 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 34 transitions. [2022-11-25 23:51:25,575 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-25 23:51:25,575 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:25,576 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-25 23:51:25,576 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 23:51:25,576 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:25,577 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:25,577 INFO L85 PathProgramCache]: Analyzing trace with hash 4583106, now seen corresponding path program 1 times [2022-11-25 23:51:25,577 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:25,578 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [350043708] [2022-11-25 23:51:25,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:25,578 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:25,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:25,883 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:25,883 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:25,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [350043708] [2022-11-25 23:51:25,884 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [350043708] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:25,884 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:51:25,884 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:51:25,885 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [954957134] [2022-11-25 23:51:25,885 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:25,886 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 23:51:25,886 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:25,887 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 23:51:25,887 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:51:25,888 INFO L87 Difference]: Start difference. First operand 31 states and 34 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:25,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:25,926 INFO L93 Difference]: Finished difference Result 29 states and 32 transitions. [2022-11-25 23:51:25,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:51:25,926 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-25 23:51:25,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:25,927 INFO L225 Difference]: With dead ends: 29 [2022-11-25 23:51:25,928 INFO L226 Difference]: Without dead ends: 29 [2022-11-25 23:51:25,928 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:51:25,929 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 27 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:25,930 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 14 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:51:25,931 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-25 23:51:25,933 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-25 23:51:25,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 16 states have (on average 2.0) internal successors, (32), 28 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:25,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 32 transitions. [2022-11-25 23:51:25,935 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 32 transitions. Word has length 4 [2022-11-25 23:51:25,935 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:25,935 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 32 transitions. [2022-11-25 23:51:25,936 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:25,936 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 32 transitions. [2022-11-25 23:51:25,936 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-25 23:51:25,936 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:25,937 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-25 23:51:25,937 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 23:51:25,937 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:25,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:25,938 INFO L85 PathProgramCache]: Analyzing trace with hash 4583107, now seen corresponding path program 1 times [2022-11-25 23:51:25,938 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:25,939 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1100359782] [2022-11-25 23:51:25,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:25,939 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:25,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:26,326 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:26,326 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:26,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1100359782] [2022-11-25 23:51:26,326 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1100359782] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:26,327 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:51:26,327 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:51:26,327 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1046000351] [2022-11-25 23:51:26,327 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:26,328 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:51:26,328 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:26,328 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:51:26,328 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:51:26,329 INFO L87 Difference]: Start difference. First operand 29 states and 32 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:26,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:26,503 INFO L93 Difference]: Finished difference Result 55 states and 61 transitions. [2022-11-25 23:51:26,504 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:51:26,504 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-25 23:51:26,504 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:26,510 INFO L225 Difference]: With dead ends: 55 [2022-11-25 23:51:26,510 INFO L226 Difference]: Without dead ends: 55 [2022-11-25 23:51:26,511 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-25 23:51:26,512 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 87 mSDsluCounter, 24 mSDsCounter, 0 mSdLazyCounter, 58 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 37 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 58 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:26,512 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 37 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 58 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:51:26,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-25 23:51:26,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 31. [2022-11-25 23:51:26,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:26,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-11-25 23:51:26,519 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 4 [2022-11-25 23:51:26,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:26,519 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-11-25 23:51:26,519 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:26,519 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-11-25 23:51:26,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 23:51:26,520 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:26,520 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-25 23:51:26,520 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 23:51:26,521 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:26,525 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:26,526 INFO L85 PathProgramCache]: Analyzing trace with hash 142164286, now seen corresponding path program 1 times [2022-11-25 23:51:26,526 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:26,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1022409118] [2022-11-25 23:51:26,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:26,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:26,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:26,603 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:26,603 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:26,604 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1022409118] [2022-11-25 23:51:26,604 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1022409118] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:26,604 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:51:26,604 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:51:26,604 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1799664963] [2022-11-25 23:51:26,605 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:26,605 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 23:51:26,605 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:26,606 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 23:51:26,606 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:51:26,606 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:26,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:26,643 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-11-25 23:51:26,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:51:26,644 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 23:51:26,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:26,647 INFO L225 Difference]: With dead ends: 29 [2022-11-25 23:51:26,647 INFO L226 Difference]: Without dead ends: 29 [2022-11-25 23:51:26,647 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:51:26,653 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 24 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:26,654 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 14 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:51:26,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-25 23:51:26,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-25 23:51:26,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 18 states have (on average 1.8333333333333333) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:26,657 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-11-25 23:51:26,658 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 5 [2022-11-25 23:51:26,658 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:26,658 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-11-25 23:51:26,658 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:26,658 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-11-25 23:51:26,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 23:51:26,659 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:26,659 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-25 23:51:26,659 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 23:51:26,659 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:26,660 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:26,660 INFO L85 PathProgramCache]: Analyzing trace with hash 142164287, now seen corresponding path program 1 times [2022-11-25 23:51:26,660 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:26,661 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1122484963] [2022-11-25 23:51:26,661 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:26,661 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:26,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:26,843 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:26,843 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:26,843 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1122484963] [2022-11-25 23:51:26,843 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1122484963] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:26,844 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:51:26,844 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 23:51:26,844 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1687983008] [2022-11-25 23:51:26,844 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:26,844 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 23:51:26,845 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:26,845 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 23:51:26,845 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-25 23:51:26,845 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:26,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:26,958 INFO L93 Difference]: Finished difference Result 50 states and 56 transitions. [2022-11-25 23:51:26,958 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 23:51:26,958 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 23:51:26,958 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:26,959 INFO L225 Difference]: With dead ends: 50 [2022-11-25 23:51:26,959 INFO L226 Difference]: Without dead ends: 50 [2022-11-25 23:51:26,960 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-25 23:51:26,964 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 122 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:26,967 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 30 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:51:26,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-25 23:51:26,973 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 31. [2022-11-25 23:51:26,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 20 states have (on average 1.8) internal successors, (36), 30 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:26,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 36 transitions. [2022-11-25 23:51:26,974 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 36 transitions. Word has length 5 [2022-11-25 23:51:26,974 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:26,974 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 36 transitions. [2022-11-25 23:51:26,974 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:26,974 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 36 transitions. [2022-11-25 23:51:26,975 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 23:51:26,975 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:26,975 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-25 23:51:26,975 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 23:51:26,975 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:26,976 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:26,976 INFO L85 PathProgramCache]: Analyzing trace with hash 142166373, now seen corresponding path program 1 times [2022-11-25 23:51:26,976 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:26,976 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [431654768] [2022-11-25 23:51:26,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:26,977 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:27,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:27,079 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:27,080 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:27,080 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [431654768] [2022-11-25 23:51:27,080 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [431654768] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:27,081 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:51:27,081 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:51:27,081 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [371303340] [2022-11-25 23:51:27,081 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:27,082 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:51:27,082 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:27,083 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:51:27,083 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:51:27,084 INFO L87 Difference]: Start difference. First operand 31 states and 36 transitions. Second operand has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:27,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:27,115 INFO L93 Difference]: Finished difference Result 31 states and 35 transitions. [2022-11-25 23:51:27,116 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:51:27,117 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 23:51:27,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:27,117 INFO L225 Difference]: With dead ends: 31 [2022-11-25 23:51:27,118 INFO L226 Difference]: Without dead ends: 31 [2022-11-25 23:51:27,118 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:51:27,121 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 30 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:27,123 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 41 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:51:27,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-11-25 23:51:27,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2022-11-25 23:51:27,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 20 states have (on average 1.75) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:27,136 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-11-25 23:51:27,136 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 5 [2022-11-25 23:51:27,136 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:27,136 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-11-25 23:51:27,137 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:27,137 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-11-25 23:51:27,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-25 23:51:27,138 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:27,138 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-25 23:51:27,138 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-25 23:51:27,139 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:27,140 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:27,140 INFO L85 PathProgramCache]: Analyzing trace with hash 109470704, now seen corresponding path program 1 times [2022-11-25 23:51:27,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:27,141 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [620015884] [2022-11-25 23:51:27,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:27,141 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:27,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:27,528 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:27,528 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:27,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [620015884] [2022-11-25 23:51:27,529 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [620015884] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:51:27,529 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [781594776] [2022-11-25 23:51:27,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:27,529 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:27,529 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:51:27,534 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:51:27,558 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 23:51:27,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:27,619 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-25 23:51:27,625 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:51:27,748 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:27,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-25 23:51:27,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:51:27,920 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:27,920 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:51:28,066 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:51:28,083 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:28,084 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [781594776] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:51:28,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [590773718] [2022-11-25 23:51:28,102 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-25 23:51:28,102 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:51:28,107 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:51:28,116 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:51:28,117 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:51:28,229 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:28,232 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:28,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:51:28,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:28,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:28,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:28,510 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:51:29,034 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '515#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_#t~nondet13#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet13#1|)) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:51:29,034 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:51:29,035 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:51:29,035 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 11 [2022-11-25 23:51:29,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1641927280] [2022-11-25 23:51:29,035 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:51:29,035 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-25 23:51:29,035 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:29,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-25 23:51:29,038 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2022-11-25 23:51:29,039 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:29,438 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:29,439 INFO L93 Difference]: Finished difference Result 76 states and 85 transitions. [2022-11-25 23:51:29,439 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 23:51:29,439 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-25 23:51:29,440 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:29,440 INFO L225 Difference]: With dead ends: 76 [2022-11-25 23:51:29,440 INFO L226 Difference]: Without dead ends: 76 [2022-11-25 23:51:29,441 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 4 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-11-25 23:51:29,441 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 218 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:29,442 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [218 Valid, 110 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:51:29,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-25 23:51:29,444 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 27. [2022-11-25 23:51:29,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 18 states have (on average 1.6666666666666667) internal successors, (30), 26 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:29,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 30 transitions. [2022-11-25 23:51:29,445 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 30 transitions. Word has length 6 [2022-11-25 23:51:29,445 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:29,445 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 30 transitions. [2022-11-25 23:51:29,445 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:29,446 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 30 transitions. [2022-11-25 23:51:29,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-25 23:51:29,446 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:29,446 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1] [2022-11-25 23:51:29,458 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-25 23:51:29,647 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:29,647 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:29,648 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:29,648 INFO L85 PathProgramCache]: Analyzing trace with hash -819016292, now seen corresponding path program 1 times [2022-11-25 23:51:29,648 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:29,648 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1118003192] [2022-11-25 23:51:29,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:29,648 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:29,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:29,861 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:29,861 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:29,861 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1118003192] [2022-11-25 23:51:29,861 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1118003192] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:51:29,861 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2045552687] [2022-11-25 23:51:29,861 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:29,862 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:29,862 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:51:29,863 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:51:29,886 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-25 23:51:29,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:29,940 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-25 23:51:29,942 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:51:30,015 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-25 23:51:30,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-25 23:51:30,197 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:30,198 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:51:30,360 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:30,360 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2045552687] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:51:30,360 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1236501432] [2022-11-25 23:51:30,362 INFO L159 IcfgInterpreter]: Started Sifa with 6 locations of interest [2022-11-25 23:51:30,362 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:51:30,362 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:51:30,363 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:51:30,363 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:51:30,409 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:30,411 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:30,412 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:51:30,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:30,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:30,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:30,641 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:51:31,318 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '683#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet15#1| 127) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet15#1|)) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:51:31,318 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:51:31,318 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:51:31,318 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-11-25 23:51:31,318 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1001356548] [2022-11-25 23:51:31,319 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:51:31,319 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-25 23:51:31,319 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:31,319 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-25 23:51:31,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=112, Invalid=350, Unknown=0, NotChecked=0, Total=462 [2022-11-25 23:51:31,320 INFO L87 Difference]: Start difference. First operand 27 states and 30 transitions. Second operand has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:31,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:31,591 INFO L93 Difference]: Finished difference Result 46 states and 51 transitions. [2022-11-25 23:51:31,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-25 23:51:31,592 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-25 23:51:31,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:31,592 INFO L225 Difference]: With dead ends: 46 [2022-11-25 23:51:31,593 INFO L226 Difference]: Without dead ends: 46 [2022-11-25 23:51:31,593 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 142 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=156, Invalid=444, Unknown=0, NotChecked=0, Total=600 [2022-11-25 23:51:31,594 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 288 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:31,594 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 58 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:51:31,611 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-25 23:51:31,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 25. [2022-11-25 23:51:31,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 24 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:31,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 28 transitions. [2022-11-25 23:51:31,616 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 28 transitions. Word has length 7 [2022-11-25 23:51:31,616 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:31,616 INFO L495 AbstractCegarLoop]: Abstraction has 25 states and 28 transitions. [2022-11-25 23:51:31,617 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:31,617 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 28 transitions. [2022-11-25 23:51:31,617 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-25 23:51:31,617 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:31,617 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:51:31,628 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-25 23:51:31,823 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:31,824 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:31,824 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:31,825 INFO L85 PathProgramCache]: Analyzing trace with hash 380363394, now seen corresponding path program 1 times [2022-11-25 23:51:31,825 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:31,825 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [955800384] [2022-11-25 23:51:31,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:31,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:31,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:32,225 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:32,225 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:32,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [955800384] [2022-11-25 23:51:32,226 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [955800384] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:51:32,227 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [259396311] [2022-11-25 23:51:32,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:32,227 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:32,227 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:51:32,229 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:51:32,251 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-25 23:51:32,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:32,306 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-25 23:51:32,307 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:51:32,463 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:32,464 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 23:51:32,464 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [259396311] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:32,464 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 23:51:32,464 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 10 [2022-11-25 23:51:32,465 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [345405310] [2022-11-25 23:51:32,465 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:32,466 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-25 23:51:32,466 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:32,466 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-25 23:51:32,466 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=99, Unknown=0, NotChecked=0, Total=132 [2022-11-25 23:51:32,467 INFO L87 Difference]: Start difference. First operand 25 states and 28 transitions. Second operand has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:32,562 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:32,562 INFO L93 Difference]: Finished difference Result 25 states and 28 transitions. [2022-11-25 23:51:32,563 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 23:51:32,563 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-25 23:51:32,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:32,563 INFO L225 Difference]: With dead ends: 25 [2022-11-25 23:51:32,564 INFO L226 Difference]: Without dead ends: 25 [2022-11-25 23:51:32,564 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=47, Invalid=135, Unknown=0, NotChecked=0, Total=182 [2022-11-25 23:51:32,564 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 59 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 9 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:32,565 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 9 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:51:32,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25 states. [2022-11-25 23:51:32,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25 to 24. [2022-11-25 23:51:32,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 17 states have (on average 1.588235294117647) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:32,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 27 transitions. [2022-11-25 23:51:32,567 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 27 transitions. Word has length 8 [2022-11-25 23:51:32,567 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:32,567 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 27 transitions. [2022-11-25 23:51:32,567 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:32,567 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 27 transitions. [2022-11-25 23:51:32,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-25 23:51:32,567 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:32,567 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:51:32,578 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-25 23:51:32,768 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:32,768 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:32,769 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:32,769 INFO L85 PathProgramCache]: Analyzing trace with hash -1093635206, now seen corresponding path program 1 times [2022-11-25 23:51:32,769 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:32,769 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1013309169] [2022-11-25 23:51:32,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:32,769 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:32,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:32,828 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:32,828 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:32,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1013309169] [2022-11-25 23:51:32,829 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1013309169] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:32,829 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:51:32,829 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:51:32,829 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [647922749] [2022-11-25 23:51:32,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:32,830 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:51:32,830 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:32,831 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:51:32,832 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:51:32,832 INFO L87 Difference]: Start difference. First operand 24 states and 27 transitions. Second operand has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:32,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:32,871 INFO L93 Difference]: Finished difference Result 23 states and 26 transitions. [2022-11-25 23:51:32,871 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:51:32,871 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-25 23:51:32,872 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:32,872 INFO L225 Difference]: With dead ends: 23 [2022-11-25 23:51:32,872 INFO L226 Difference]: Without dead ends: 23 [2022-11-25 23:51:32,872 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:51:32,873 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 29 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 11 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:32,873 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 11 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:51:32,874 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23 states. [2022-11-25 23:51:32,875 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23 to 23. [2022-11-25 23:51:32,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 17 states have (on average 1.5294117647058822) internal successors, (26), 22 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:32,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 26 transitions. [2022-11-25 23:51:32,876 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 26 transitions. Word has length 9 [2022-11-25 23:51:32,876 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:32,876 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 26 transitions. [2022-11-25 23:51:32,876 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:32,877 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions. [2022-11-25 23:51:32,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-25 23:51:32,877 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:32,877 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:51:32,877 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-25 23:51:32,878 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:32,878 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:32,878 INFO L85 PathProgramCache]: Analyzing trace with hash -1093635205, now seen corresponding path program 1 times [2022-11-25 23:51:32,879 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:32,879 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1779471882] [2022-11-25 23:51:32,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:32,879 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:32,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:33,076 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:33,076 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:33,076 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1779471882] [2022-11-25 23:51:33,076 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1779471882] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:51:33,076 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1440060012] [2022-11-25 23:51:33,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:33,077 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:33,077 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:51:33,079 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:51:33,106 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-25 23:51:33,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:33,166 INFO L263 TraceCheckSpWp]: Trace formula consists of 109 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-25 23:51:33,168 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:51:33,185 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:51:33,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 23:51:33,274 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:33,274 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:51:33,354 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:33,354 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1440060012] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-25 23:51:33,354 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-25 23:51:33,355 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6, 5] total 12 [2022-11-25 23:51:33,355 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1892623407] [2022-11-25 23:51:33,355 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:33,355 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 23:51:33,356 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:33,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 23:51:33,356 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=108, Unknown=0, NotChecked=0, Total=156 [2022-11-25 23:51:33,357 INFO L87 Difference]: Start difference. First operand 23 states and 26 transitions. Second operand has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:33,448 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:33,448 INFO L93 Difference]: Finished difference Result 26 states and 29 transitions. [2022-11-25 23:51:33,448 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 23:51:33,449 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-25 23:51:33,449 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:33,449 INFO L225 Difference]: With dead ends: 26 [2022-11-25 23:51:33,449 INFO L226 Difference]: Without dead ends: 26 [2022-11-25 23:51:33,449 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=65, Invalid=145, Unknown=0, NotChecked=0, Total=210 [2022-11-25 23:51:33,450 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 43 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:33,450 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 17 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:51:33,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26 states. [2022-11-25 23:51:33,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26 to 24. [2022-11-25 23:51:33,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 18 states have (on average 1.5) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:33,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 27 transitions. [2022-11-25 23:51:33,452 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 27 transitions. Word has length 9 [2022-11-25 23:51:33,452 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:33,453 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 27 transitions. [2022-11-25 23:51:33,453 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:33,453 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 27 transitions. [2022-11-25 23:51:33,453 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-25 23:51:33,454 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:33,454 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:51:33,464 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-25 23:51:33,654 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-25 23:51:33,655 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:33,655 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:33,655 INFO L85 PathProgramCache]: Analyzing trace with hash 1283556116, now seen corresponding path program 1 times [2022-11-25 23:51:33,655 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:33,655 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [203420997] [2022-11-25 23:51:33,655 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:33,655 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:33,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:34,066 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:34,067 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:34,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [203420997] [2022-11-25 23:51:34,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [203420997] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:51:34,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1405954852] [2022-11-25 23:51:34,067 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:34,067 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:34,067 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:51:34,068 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:51:34,076 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-25 23:51:34,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:34,151 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 31 conjunts are in the unsatisfiable core [2022-11-25 23:51:34,154 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:51:34,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:34,374 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:51:34,377 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:51:34,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-25 23:51:34,402 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:34,402 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:51:34,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-25 23:51:34,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-25 23:51:34,661 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:34,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1405954852] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:51:34,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1192881512] [2022-11-25 23:51:34,665 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:51:34,665 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:51:34,666 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:51:34,666 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:51:34,666 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:51:34,748 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:34,753 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:34,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:51:34,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:51:34,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:34,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:35,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:35,084 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:51:35,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:51:35,213 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:51:36,676 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1100#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:51:36,677 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:51:36,677 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:51:36,677 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 9, 9] total 22 [2022-11-25 23:51:36,677 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [599409676] [2022-11-25 23:51:36,677 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:51:36,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-25 23:51:36,678 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:36,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-25 23:51:36,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=112, Invalid=818, Unknown=0, NotChecked=0, Total=930 [2022-11-25 23:51:36,679 INFO L87 Difference]: Start difference. First operand 24 states and 27 transitions. Second operand has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:37,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:37,498 INFO L93 Difference]: Finished difference Result 54 states and 58 transitions. [2022-11-25 23:51:37,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-25 23:51:37,499 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-25 23:51:37,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:37,499 INFO L225 Difference]: With dead ends: 54 [2022-11-25 23:51:37,499 INFO L226 Difference]: Without dead ends: 54 [2022-11-25 23:51:37,500 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 278 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=257, Invalid=1303, Unknown=0, NotChecked=0, Total=1560 [2022-11-25 23:51:37,501 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 283 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 263 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 283 SdHoareTripleChecker+Valid, 98 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 263 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:37,501 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [283 Valid, 98 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 263 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:51:37,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2022-11-25 23:51:37,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 30. [2022-11-25 23:51:37,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 24 states have (on average 1.4166666666666667) internal successors, (34), 29 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:37,504 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 34 transitions. [2022-11-25 23:51:37,504 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 34 transitions. Word has length 11 [2022-11-25 23:51:37,504 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:37,504 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 34 transitions. [2022-11-25 23:51:37,504 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:37,504 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 34 transitions. [2022-11-25 23:51:37,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-25 23:51:37,505 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:37,505 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:51:37,514 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-25 23:51:37,711 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-25 23:51:37,712 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:37,712 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:37,712 INFO L85 PathProgramCache]: Analyzing trace with hash 1135532470, now seen corresponding path program 1 times [2022-11-25 23:51:37,712 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:37,713 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2059501983] [2022-11-25 23:51:37,713 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:37,713 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:37,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:37,794 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:51:37,794 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:37,794 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2059501983] [2022-11-25 23:51:37,794 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2059501983] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:37,794 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:51:37,795 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 23:51:37,795 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [940029280] [2022-11-25 23:51:37,795 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:37,795 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:51:37,795 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:37,796 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:51:37,796 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:51:37,796 INFO L87 Difference]: Start difference. First operand 30 states and 34 transitions. Second operand has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:37,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:37,842 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-11-25 23:51:37,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:51:37,843 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-25 23:51:37,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:37,844 INFO L225 Difference]: With dead ends: 29 [2022-11-25 23:51:37,844 INFO L226 Difference]: Without dead ends: 29 [2022-11-25 23:51:37,844 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 23:51:37,845 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 33 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:37,845 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 17 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:51:37,846 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-25 23:51:37,847 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-25 23:51:37,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 24 states have (on average 1.375) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:37,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-11-25 23:51:37,848 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 12 [2022-11-25 23:51:37,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:37,848 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-11-25 23:51:37,849 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:37,849 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-11-25 23:51:37,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-25 23:51:37,849 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:37,850 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:51:37,850 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-11-25 23:51:37,850 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:37,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:37,851 INFO L85 PathProgramCache]: Analyzing trace with hash 1135532471, now seen corresponding path program 1 times [2022-11-25 23:51:37,851 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:37,851 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1269441307] [2022-11-25 23:51:37,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:37,851 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:37,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:37,965 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:51:37,966 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:37,966 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1269441307] [2022-11-25 23:51:37,966 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1269441307] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:37,966 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:51:37,966 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 23:51:37,966 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2126749599] [2022-11-25 23:51:37,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:37,967 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 23:51:37,967 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:37,967 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 23:51:37,968 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-25 23:51:37,968 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:38,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:38,046 INFO L93 Difference]: Finished difference Result 44 states and 52 transitions. [2022-11-25 23:51:38,047 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 23:51:38,047 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-25 23:51:38,047 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:38,047 INFO L225 Difference]: With dead ends: 44 [2022-11-25 23:51:38,047 INFO L226 Difference]: Without dead ends: 44 [2022-11-25 23:51:38,048 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2022-11-25 23:51:38,048 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 34 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 68 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:38,048 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 29 Invalid, 68 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:51:38,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2022-11-25 23:51:38,050 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 31. [2022-11-25 23:51:38,050 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 26 states have (on average 1.3461538461538463) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:38,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-11-25 23:51:38,051 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 12 [2022-11-25 23:51:38,051 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:38,051 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-11-25 23:51:38,051 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:38,052 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-11-25 23:51:38,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-25 23:51:38,052 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:38,052 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:51:38,052 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-25 23:51:38,053 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:38,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:38,053 INFO L85 PathProgramCache]: Analyzing trace with hash -1753115215, now seen corresponding path program 2 times [2022-11-25 23:51:38,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:38,054 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1425887891] [2022-11-25 23:51:38,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:38,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:38,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:38,242 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:38,242 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:38,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1425887891] [2022-11-25 23:51:38,243 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1425887891] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:51:38,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [94453870] [2022-11-25 23:51:38,243 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:51:38,243 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:38,244 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:51:38,247 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:51:38,274 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-25 23:51:38,339 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-25 23:51:38,340 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:51:38,341 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-25 23:51:38,343 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:51:38,362 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:51:38,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 23:51:38,402 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:38,454 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:51:38,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-25 23:51:38,527 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:51:38,527 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:51:38,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-25 23:51:38,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-25 23:51:38,738 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:51:38,739 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [94453870] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:51:38,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [607715057] [2022-11-25 23:51:38,744 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:51:38,744 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:51:38,744 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:51:38,744 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:51:38,745 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:51:38,796 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:38,798 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:38,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:51:38,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:51:38,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:38,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:39,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:39,094 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:51:39,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:51:39,192 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:51:40,536 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1451#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:51:40,537 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:51:40,537 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:51:40,537 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 15 [2022-11-25 23:51:40,537 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1598660133] [2022-11-25 23:51:40,537 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:51:40,538 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-11-25 23:51:40,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:40,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-11-25 23:51:40,539 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=491, Unknown=0, NotChecked=0, Total=600 [2022-11-25 23:51:40,539 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 16 states, 15 states have (on average 2.2) internal successors, (33), 16 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:40,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:40,923 INFO L93 Difference]: Finished difference Result 58 states and 64 transitions. [2022-11-25 23:51:40,924 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-25 23:51:40,924 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 15 states have (on average 2.2) internal successors, (33), 16 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-25 23:51:40,924 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:40,924 INFO L225 Difference]: With dead ends: 58 [2022-11-25 23:51:40,925 INFO L226 Difference]: Without dead ends: 58 [2022-11-25 23:51:40,925 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 200 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=175, Invalid=755, Unknown=0, NotChecked=0, Total=930 [2022-11-25 23:51:40,926 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 90 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 191 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:40,926 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 69 Invalid, 191 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:51:40,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-11-25 23:51:40,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 33. [2022-11-25 23:51:40,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 28 states have (on average 1.3571428571428572) internal successors, (38), 32 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:40,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 38 transitions. [2022-11-25 23:51:40,929 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 38 transitions. Word has length 13 [2022-11-25 23:51:40,929 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:40,929 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 38 transitions. [2022-11-25 23:51:40,930 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 15 states have (on average 2.2) internal successors, (33), 16 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:40,930 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 38 transitions. [2022-11-25 23:51:40,930 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-25 23:51:40,930 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:40,930 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:51:40,940 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-25 23:51:41,136 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-11-25 23:51:41,136 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:41,137 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:41,137 INFO L85 PathProgramCache]: Analyzing trace with hash 841768262, now seen corresponding path program 1 times [2022-11-25 23:51:41,137 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:41,137 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [803738342] [2022-11-25 23:51:41,137 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:41,137 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:41,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:41,181 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:51:41,182 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:41,182 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [803738342] [2022-11-25 23:51:41,182 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [803738342] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:41,182 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:51:41,183 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:51:41,183 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1030557549] [2022-11-25 23:51:41,183 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:41,183 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:51:41,183 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:41,184 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:51:41,184 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:51:41,184 INFO L87 Difference]: Start difference. First operand 33 states and 38 transitions. Second operand has 4 states, 3 states have (on average 4.333333333333333) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:41,232 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:41,233 INFO L93 Difference]: Finished difference Result 32 states and 37 transitions. [2022-11-25 23:51:41,233 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:51:41,233 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 4.333333333333333) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-25 23:51:41,233 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:41,234 INFO L225 Difference]: With dead ends: 32 [2022-11-25 23:51:41,234 INFO L226 Difference]: Without dead ends: 32 [2022-11-25 23:51:41,234 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:51:41,235 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 10 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:41,235 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 14 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:51:41,236 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-11-25 23:51:41,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 32. [2022-11-25 23:51:41,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 28 states have (on average 1.3214285714285714) internal successors, (37), 31 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:41,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 37 transitions. [2022-11-25 23:51:41,239 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 37 transitions. Word has length 13 [2022-11-25 23:51:41,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:41,239 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 37 transitions. [2022-11-25 23:51:41,240 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 4.333333333333333) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:41,240 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 37 transitions. [2022-11-25 23:51:41,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-25 23:51:41,242 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:41,242 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:51:41,242 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-11-25 23:51:41,242 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:41,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:41,243 INFO L85 PathProgramCache]: Analyzing trace with hash 841768263, now seen corresponding path program 1 times [2022-11-25 23:51:41,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:41,243 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [710523940] [2022-11-25 23:51:41,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:41,244 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:41,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:41,465 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:41,465 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:41,465 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [710523940] [2022-11-25 23:51:41,465 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [710523940] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:51:41,465 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [948993420] [2022-11-25 23:51:41,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:41,466 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:41,466 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:51:41,467 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:51:41,490 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-25 23:51:41,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:41,555 INFO L263 TraceCheckSpWp]: Trace formula consists of 139 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-25 23:51:41,557 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:51:41,570 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:51:41,570 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 23:51:41,640 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:41,641 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:51:41,732 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:41,733 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [948993420] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:51:41,733 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2055098359] [2022-11-25 23:51:41,735 INFO L159 IcfgInterpreter]: Started Sifa with 13 locations of interest [2022-11-25 23:51:41,735 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:51:41,735 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:51:41,736 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:51:41,736 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:51:41,787 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:41,791 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:41,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:51:41,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:51:41,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:41,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:42,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:42,065 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:51:42,066 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:51:42,205 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:51:45,156 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [2055098359] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:45,157 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:51:45,157 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [6, 6, 6] total 24 [2022-11-25 23:51:45,158 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1251938066] [2022-11-25 23:51:45,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:45,158 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-25 23:51:45,158 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:45,159 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-25 23:51:45,159 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=457, Unknown=0, NotChecked=0, Total=600 [2022-11-25 23:51:45,160 INFO L87 Difference]: Start difference. First operand 32 states and 37 transitions. Second operand has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:48,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:48,716 INFO L93 Difference]: Finished difference Result 68 states and 78 transitions. [2022-11-25 23:51:48,717 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-25 23:51:48,717 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-25 23:51:48,717 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:48,718 INFO L225 Difference]: With dead ends: 68 [2022-11-25 23:51:48,718 INFO L226 Difference]: Without dead ends: 57 [2022-11-25 23:51:48,719 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 19 SyntacticMatches, 1 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 229 ImplicationChecksByTransitivity, 6.2s TimeCoverageRelationStatistics Valid=297, Invalid=825, Unknown=0, NotChecked=0, Total=1122 [2022-11-25 23:51:48,719 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 54 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 40 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:48,719 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 40 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 23:51:48,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-25 23:51:48,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 51. [2022-11-25 23:51:48,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 47 states have (on average 1.3191489361702127) internal successors, (62), 50 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:48,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 62 transitions. [2022-11-25 23:51:48,723 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 62 transitions. Word has length 13 [2022-11-25 23:51:48,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:48,723 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 62 transitions. [2022-11-25 23:51:48,723 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:48,723 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 62 transitions. [2022-11-25 23:51:48,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-25 23:51:48,724 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:48,724 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:51:48,741 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-25 23:51:48,930 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-11-25 23:51:48,930 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:48,931 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:48,931 INFO L85 PathProgramCache]: Analyzing trace with hash -1249350982, now seen corresponding path program 1 times [2022-11-25 23:51:48,931 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:48,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1123638519] [2022-11-25 23:51:48,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:48,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:48,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:49,078 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:49,078 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:49,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1123638519] [2022-11-25 23:51:49,079 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1123638519] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:51:49,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1577363419] [2022-11-25 23:51:49,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:49,079 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:49,079 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:51:49,080 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:51:49,095 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-25 23:51:49,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:49,183 INFO L263 TraceCheckSpWp]: Trace formula consists of 152 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-25 23:51:49,184 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:51:49,307 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:49,307 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:51:49,445 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:49,445 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1577363419] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:51:49,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1103761124] [2022-11-25 23:51:49,447 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-25 23:51:49,447 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:51:49,447 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:51:49,448 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:51:49,448 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:51:49,494 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:49,496 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:49,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:51:49,569 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:51:49,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:49,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:49,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:49,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:49,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:49,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:49,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:49,957 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:51:49,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:51:50,071 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:51:53,175 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1103761124] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:51:53,178 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:51:53,178 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [8, 7, 7] total 30 [2022-11-25 23:51:53,179 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [630149312] [2022-11-25 23:51:53,179 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:51:53,179 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-25 23:51:53,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:53,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-25 23:51:53,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=138, Invalid=732, Unknown=0, NotChecked=0, Total=870 [2022-11-25 23:51:53,181 INFO L87 Difference]: Start difference. First operand 51 states and 62 transitions. Second operand has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:53,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:51:53,395 INFO L93 Difference]: Finished difference Result 62 states and 75 transitions. [2022-11-25 23:51:53,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-25 23:51:53,396 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-25 23:51:53,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:51:53,396 INFO L225 Difference]: With dead ends: 62 [2022-11-25 23:51:53,396 INFO L226 Difference]: Without dead ends: 62 [2022-11-25 23:51:53,397 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 22 SyntacticMatches, 1 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 264 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=138, Invalid=732, Unknown=0, NotChecked=0, Total=870 [2022-11-25 23:51:53,398 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 31 mSDsluCounter, 19 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 22 SdHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:51:53,398 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 22 Invalid, 135 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:51:53,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-25 23:51:53,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 54. [2022-11-25 23:51:53,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 50 states have (on average 1.3) internal successors, (65), 53 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:53,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 65 transitions. [2022-11-25 23:51:53,402 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 65 transitions. Word has length 15 [2022-11-25 23:51:53,402 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:51:53,402 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 65 transitions. [2022-11-25 23:51:53,402 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:51:53,402 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 65 transitions. [2022-11-25 23:51:53,403 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-25 23:51:53,403 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:51:53,403 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:51:53,436 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-25 23:51:53,609 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:53,609 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:51:53,610 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:51:53,610 INFO L85 PathProgramCache]: Analyzing trace with hash -1116540982, now seen corresponding path program 3 times [2022-11-25 23:51:53,610 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:51:53,610 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1430560199] [2022-11-25 23:51:53,610 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:51:53,610 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:51:53,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:51:54,156 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:54,156 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:51:54,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1430560199] [2022-11-25 23:51:54,157 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1430560199] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:51:54,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [287203160] [2022-11-25 23:51:54,157 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:51:54,157 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:51:54,157 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:51:54,159 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:51:54,178 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-25 23:51:54,267 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:51:54,267 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:51:54,268 INFO L263 TraceCheckSpWp]: Trace formula consists of 144 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-25 23:51:54,270 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:51:54,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:51:54,711 INFO L321 Elim1Store]: treesize reduction 9, result has 47.1 percent of original size [2022-11-25 23:51:54,712 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 18 [2022-11-25 23:51:54,745 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:54,745 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:51:54,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-11-25 23:51:54,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-11-25 23:51:55,331 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:51:55,331 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [287203160] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:51:55,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [277166436] [2022-11-25 23:51:55,333 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:51:55,334 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:51:55,334 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:51:55,334 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:51:55,335 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:51:55,392 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:55,394 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:51:55,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:51:55,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:51:55,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:55,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:55,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:51:55,720 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:51:55,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:51:55,822 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:51:57,386 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2211#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:51:57,387 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:51:57,387 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:51:57,387 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 12, 12] total 30 [2022-11-25 23:51:57,387 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [757944580] [2022-11-25 23:51:57,387 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:51:57,387 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-25 23:51:57,388 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:51:57,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-25 23:51:57,389 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=135, Invalid=1347, Unknown=0, NotChecked=0, Total=1482 [2022-11-25 23:51:57,389 INFO L87 Difference]: Start difference. First operand 54 states and 65 transitions. Second operand has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:00,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:52:00,538 INFO L93 Difference]: Finished difference Result 150 states and 172 transitions. [2022-11-25 23:52:00,546 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-25 23:52:00,547 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-25 23:52:00,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:52:00,548 INFO L225 Difference]: With dead ends: 150 [2022-11-25 23:52:00,548 INFO L226 Difference]: Without dead ends: 150 [2022-11-25 23:52:00,549 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 696 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=609, Invalid=3423, Unknown=0, NotChecked=0, Total=4032 [2022-11-25 23:52:00,550 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 712 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 708 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 712 SdHoareTripleChecker+Valid, 168 SdHoareTripleChecker+Invalid, 718 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 708 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-25 23:52:00,550 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [712 Valid, 168 Invalid, 718 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 708 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-25 23:52:00,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-11-25 23:52:00,564 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 74. [2022-11-25 23:52:00,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 70 states have (on average 1.2857142857142858) internal successors, (90), 73 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:00,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 90 transitions. [2022-11-25 23:52:00,566 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 90 transitions. Word has length 15 [2022-11-25 23:52:00,566 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:52:00,566 INFO L495 AbstractCegarLoop]: Abstraction has 74 states and 90 transitions. [2022-11-25 23:52:00,566 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:00,567 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 90 transitions. [2022-11-25 23:52:00,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-25 23:52:00,570 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:52:00,570 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:52:00,579 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-25 23:52:00,776 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:00,776 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:52:00,777 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:52:00,777 INFO L85 PathProgramCache]: Analyzing trace with hash 745895037, now seen corresponding path program 1 times [2022-11-25 23:52:00,777 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:52:00,777 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [872842489] [2022-11-25 23:52:00,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:00,777 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:52:00,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:01,018 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:52:01,018 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:52:01,018 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [872842489] [2022-11-25 23:52:01,018 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [872842489] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:52:01,019 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [991903513] [2022-11-25 23:52:01,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:01,019 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:01,019 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:52:01,020 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:52:01,029 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-25 23:52:01,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:01,132 INFO L263 TraceCheckSpWp]: Trace formula consists of 163 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-25 23:52:01,134 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:52:01,235 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:52:01,235 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:52:01,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-25 23:52:01,413 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:52:01,413 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [991903513] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:52:01,413 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2032829678] [2022-11-25 23:52:01,415 INFO L159 IcfgInterpreter]: Started Sifa with 13 locations of interest [2022-11-25 23:52:01,415 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:52:01,415 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:52:01,416 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:52:01,416 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:52:01,470 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:01,473 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:01,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:52:01,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:52:01,638 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:01,664 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:01,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:01,779 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:52:01,779 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:52:01,919 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:52:03,605 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [2032829678] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:52:03,606 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:52:03,606 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [7, 8, 8] total 28 [2022-11-25 23:52:03,606 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [345689688] [2022-11-25 23:52:03,606 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:52:03,607 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-25 23:52:03,607 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:52:03,607 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-25 23:52:03,608 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=115, Invalid=697, Unknown=0, NotChecked=0, Total=812 [2022-11-25 23:52:03,608 INFO L87 Difference]: Start difference. First operand 74 states and 90 transitions. Second operand has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:07,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:52:07,339 INFO L93 Difference]: Finished difference Result 79 states and 92 transitions. [2022-11-25 23:52:07,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-25 23:52:07,340 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-25 23:52:07,340 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:52:07,341 INFO L225 Difference]: With dead ends: 79 [2022-11-25 23:52:07,341 INFO L226 Difference]: Without dead ends: 79 [2022-11-25 23:52:07,341 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 27 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 5.2s TimeCoverageRelationStatistics Valid=253, Invalid=1153, Unknown=0, NotChecked=0, Total=1406 [2022-11-25 23:52:07,342 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 41 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 215 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 216 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 215 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:52:07,342 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 58 Invalid, 216 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 215 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 23:52:07,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-11-25 23:52:07,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 75. [2022-11-25 23:52:07,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 71 states have (on average 1.2816901408450705) internal successors, (91), 74 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:07,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 91 transitions. [2022-11-25 23:52:07,362 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 91 transitions. Word has length 17 [2022-11-25 23:52:07,362 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:52:07,362 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 91 transitions. [2022-11-25 23:52:07,362 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:07,362 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 91 transitions. [2022-11-25 23:52:07,363 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-25 23:52:07,363 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:52:07,363 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:52:07,374 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-25 23:52:07,564 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:07,564 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:52:07,564 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:52:07,564 INFO L85 PathProgramCache]: Analyzing trace with hash 771518764, now seen corresponding path program 1 times [2022-11-25 23:52:07,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:52:07,565 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [329462063] [2022-11-25 23:52:07,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:07,565 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:52:07,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:07,720 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-25 23:52:07,720 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:52:07,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [329462063] [2022-11-25 23:52:07,720 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [329462063] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:52:07,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [532051233] [2022-11-25 23:52:07,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:07,721 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:07,721 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:52:07,722 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:52:07,724 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-25 23:52:07,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:07,819 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-25 23:52:07,820 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:52:07,940 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-25 23:52:07,941 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:52:08,075 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-25 23:52:08,076 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [532051233] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:52:08,076 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1949472681] [2022-11-25 23:52:08,077 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:52:08,078 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:52:08,078 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:52:08,078 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:52:08,078 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:52:08,136 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:08,140 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:08,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:52:08,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:08,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:08,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:08,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:52:08,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:08,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:08,490 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:08,547 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:08,604 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:52:08,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:52:08,757 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:52:08,837 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-25 23:52:08,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-25 23:52:08,977 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:52:08,977 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:52:09,090 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:52:09,090 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:52:09,154 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:52:11,970 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2911#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:52:11,971 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:52:11,971 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:52:11,971 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 18 [2022-11-25 23:52:11,971 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [593721081] [2022-11-25 23:52:11,971 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:52:11,972 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-25 23:52:11,972 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:52:11,972 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-25 23:52:11,973 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=844, Unknown=0, NotChecked=0, Total=992 [2022-11-25 23:52:11,973 INFO L87 Difference]: Start difference. First operand 75 states and 91 transitions. Second operand has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:12,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:52:12,270 INFO L93 Difference]: Finished difference Result 77 states and 89 transitions. [2022-11-25 23:52:12,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-25 23:52:12,271 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-25 23:52:12,271 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:52:12,272 INFO L225 Difference]: With dead ends: 77 [2022-11-25 23:52:12,272 INFO L226 Difference]: Without dead ends: 75 [2022-11-25 23:52:12,273 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 424 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=225, Invalid=1257, Unknown=0, NotChecked=0, Total=1482 [2022-11-25 23:52:12,274 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 91 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 162 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 211 SdHoareTripleChecker+Invalid, 166 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 162 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:52:12,274 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 211 Invalid, 166 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 162 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:52:12,275 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-25 23:52:12,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 71. [2022-11-25 23:52:12,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 67 states have (on average 1.2835820895522387) internal successors, (86), 70 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:12,277 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 86 transitions. [2022-11-25 23:52:12,277 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 86 transitions. Word has length 18 [2022-11-25 23:52:12,277 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:52:12,277 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 86 transitions. [2022-11-25 23:52:12,278 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:12,278 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 86 transitions. [2022-11-25 23:52:12,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-25 23:52:12,278 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:52:12,279 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:52:12,286 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-11-25 23:52:12,484 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:12,484 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:52:12,484 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:52:12,485 INFO L85 PathProgramCache]: Analyzing trace with hash 1599574128, now seen corresponding path program 1 times [2022-11-25 23:52:12,485 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:52:12,485 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1049769397] [2022-11-25 23:52:12,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:12,485 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:52:12,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:12,739 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:52:12,740 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:52:12,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1049769397] [2022-11-25 23:52:12,740 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1049769397] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:52:12,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1357331549] [2022-11-25 23:52:12,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:12,741 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:12,741 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:52:12,742 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:52:12,744 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-25 23:52:12,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:12,853 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-25 23:52:12,855 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:52:12,872 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:52:12,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 23:52:12,972 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:52:12,973 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:52:13,142 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:52:13,142 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1357331549] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:52:13,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1793407790] [2022-11-25 23:52:13,144 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-25 23:52:13,144 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:52:13,144 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:52:13,144 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:52:13,144 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:52:13,189 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:13,192 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:13,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:52:13,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:52:13,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:13,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:13,372 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:13,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:13,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:13,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:13,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:13,592 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:52:13,593 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:52:13,706 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:52:15,496 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1793407790] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:52:15,496 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:52:15,497 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [8, 8, 8] total 32 [2022-11-25 23:52:15,497 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [46192958] [2022-11-25 23:52:15,497 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:52:15,497 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-25 23:52:15,498 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:52:15,498 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-25 23:52:15,499 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=886, Unknown=0, NotChecked=0, Total=1056 [2022-11-25 23:52:15,499 INFO L87 Difference]: Start difference. First operand 71 states and 86 transitions. Second operand has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:17,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:52:17,513 INFO L93 Difference]: Finished difference Result 72 states and 87 transitions. [2022-11-25 23:52:17,514 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-25 23:52:17,514 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-25 23:52:17,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:52:17,515 INFO L225 Difference]: With dead ends: 72 [2022-11-25 23:52:17,515 INFO L226 Difference]: Without dead ends: 72 [2022-11-25 23:52:17,516 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 383 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=245, Invalid=1161, Unknown=0, NotChecked=0, Total=1406 [2022-11-25 23:52:17,517 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 15 mSDsluCounter, 26 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 31 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:52:17,517 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 31 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:52:17,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2022-11-25 23:52:17,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 69. [2022-11-25 23:52:17,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 65 states have (on average 1.2923076923076924) internal successors, (84), 68 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:17,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 84 transitions. [2022-11-25 23:52:17,520 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 84 transitions. Word has length 19 [2022-11-25 23:52:17,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:52:17,520 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 84 transitions. [2022-11-25 23:52:17,520 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:17,520 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 84 transitions. [2022-11-25 23:52:17,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-25 23:52:17,521 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:52:17,521 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:52:17,526 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-25 23:52:17,726 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:17,726 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:52:17,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:52:17,726 INFO L85 PathProgramCache]: Analyzing trace with hash -657256320, now seen corresponding path program 4 times [2022-11-25 23:52:17,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:52:17,727 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1365599994] [2022-11-25 23:52:17,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:17,727 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:52:17,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:18,217 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:52:18,217 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:52:18,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1365599994] [2022-11-25 23:52:18,217 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1365599994] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:52:18,218 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1058289870] [2022-11-25 23:52:18,218 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:52:18,218 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:18,218 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:52:18,219 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:52:18,220 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-25 23:52:18,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:18,315 INFO L263 TraceCheckSpWp]: Trace formula consists of 168 conjuncts, 50 conjunts are in the unsatisfiable core [2022-11-25 23:52:18,317 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:52:18,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:52:18,910 INFO L321 Elim1Store]: treesize reduction 13, result has 48.0 percent of original size [2022-11-25 23:52:18,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 33 treesize of output 26 [2022-11-25 23:52:18,940 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 3 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:52:18,941 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:52:19,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-25 23:52:19,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 34 [2022-11-25 23:52:19,659 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 9 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:52:19,660 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1058289870] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:52:19,660 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1205770155] [2022-11-25 23:52:19,661 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:52:19,661 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:52:19,661 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:52:19,662 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:52:19,662 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:52:19,701 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:19,703 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:19,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:52:19,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:52:19,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:19,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:19,894 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:19,946 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:52:19,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:52:20,026 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:52:21,684 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3526#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:52:21,684 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:52:21,684 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:52:21,684 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 15, 15] total 39 [2022-11-25 23:52:21,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1903840782] [2022-11-25 23:52:21,684 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:52:21,685 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-11-25 23:52:21,685 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:52:21,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-11-25 23:52:21,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=198, Invalid=2058, Unknown=0, NotChecked=0, Total=2256 [2022-11-25 23:52:21,686 INFO L87 Difference]: Start difference. First operand 69 states and 84 transitions. Second operand has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:26,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:52:26,451 INFO L93 Difference]: Finished difference Result 220 states and 252 transitions. [2022-11-25 23:52:26,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-11-25 23:52:26,451 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-25 23:52:26,451 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:52:26,452 INFO L225 Difference]: With dead ends: 220 [2022-11-25 23:52:26,453 INFO L226 Difference]: Without dead ends: 220 [2022-11-25 23:52:26,454 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 20 SyntacticMatches, 1 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1303 ImplicationChecksByTransitivity, 6.7s TimeCoverageRelationStatistics Valid=985, Invalid=5657, Unknown=0, NotChecked=0, Total=6642 [2022-11-25 23:52:26,455 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 1192 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 936 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1192 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 949 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 936 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-25 23:52:26,455 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1192 Valid, 208 Invalid, 949 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 936 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-25 23:52:26,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2022-11-25 23:52:26,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 87. [2022-11-25 23:52:26,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 83 states have (on average 1.3012048192771084) internal successors, (108), 86 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:26,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 108 transitions. [2022-11-25 23:52:26,459 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 108 transitions. Word has length 19 [2022-11-25 23:52:26,459 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:52:26,459 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 108 transitions. [2022-11-25 23:52:26,460 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:26,460 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 108 transitions. [2022-11-25 23:52:26,460 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-25 23:52:26,460 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:52:26,461 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:52:26,466 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-11-25 23:52:26,666 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-25 23:52:26,666 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:52:26,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:52:26,667 INFO L85 PathProgramCache]: Analyzing trace with hash 977322351, now seen corresponding path program 2 times [2022-11-25 23:52:26,667 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:52:26,667 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1827443710] [2022-11-25 23:52:26,667 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:26,667 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:52:26,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:26,902 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:52:26,902 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:52:26,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1827443710] [2022-11-25 23:52:26,903 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1827443710] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:52:26,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1839192542] [2022-11-25 23:52:26,903 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:52:26,903 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:26,903 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:52:26,904 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:52:26,926 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-25 23:52:27,022 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-25 23:52:27,023 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:52:27,024 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-25 23:52:27,026 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:52:27,122 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:52:27,122 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:52:27,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:52:27,278 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:52:27,278 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1839192542] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:52:27,278 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1958236950] [2022-11-25 23:52:27,280 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:52:27,280 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:52:27,280 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:52:27,280 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:52:27,280 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:52:27,325 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:27,327 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:27,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:52:27,370 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:27,413 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:27,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:27,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:27,553 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:27,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:27,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:27,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:27,709 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:52:27,710 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:52:27,810 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:52:27,861 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-25 23:52:27,861 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-25 23:52:28,004 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:52:28,005 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:52:28,109 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:52:28,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:52:28,159 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:52:31,168 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4044#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:52:31,168 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:52:31,168 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:52:31,168 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8, 8] total 19 [2022-11-25 23:52:31,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1239700025] [2022-11-25 23:52:31,168 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:52:31,169 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-25 23:52:31,169 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:52:31,169 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-25 23:52:31,170 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=145, Invalid=977, Unknown=0, NotChecked=0, Total=1122 [2022-11-25 23:52:31,170 INFO L87 Difference]: Start difference. First operand 87 states and 108 transitions. Second operand has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:31,549 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:52:31,549 INFO L93 Difference]: Finished difference Result 100 states and 119 transitions. [2022-11-25 23:52:31,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-25 23:52:31,550 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-25 23:52:31,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:52:31,552 INFO L225 Difference]: With dead ends: 100 [2022-11-25 23:52:31,552 INFO L226 Difference]: Without dead ends: 100 [2022-11-25 23:52:31,553 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 33 SyntacticMatches, 2 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 410 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=235, Invalid=1487, Unknown=0, NotChecked=0, Total=1722 [2022-11-25 23:52:31,554 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 205 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 205 SdHoareTripleChecker+Valid, 101 SdHoareTripleChecker+Invalid, 311 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:52:31,554 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [205 Valid, 101 Invalid, 311 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:52:31,554 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-11-25 23:52:31,557 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 90. [2022-11-25 23:52:31,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 86 states have (on average 1.302325581395349) internal successors, (112), 89 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:31,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 112 transitions. [2022-11-25 23:52:31,558 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 112 transitions. Word has length 20 [2022-11-25 23:52:31,558 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:52:31,558 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 112 transitions. [2022-11-25 23:52:31,558 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:31,558 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 112 transitions. [2022-11-25 23:52:31,559 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-25 23:52:31,559 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:52:31,559 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:52:31,570 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-25 23:52:31,765 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-11-25 23:52:31,765 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:52:31,766 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:52:31,766 INFO L85 PathProgramCache]: Analyzing trace with hash 977321313, now seen corresponding path program 1 times [2022-11-25 23:52:31,766 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:52:31,766 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [463521267] [2022-11-25 23:52:31,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:31,766 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:52:31,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:31,907 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-25 23:52:31,907 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:52:31,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [463521267] [2022-11-25 23:52:31,908 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [463521267] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:52:31,908 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:52:31,908 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:52:31,908 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1280316783] [2022-11-25 23:52:31,908 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:52:31,909 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:52:31,909 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:52:31,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:52:31,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:52:31,910 INFO L87 Difference]: Start difference. First operand 90 states and 112 transitions. Second operand has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:31,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:52:31,933 INFO L93 Difference]: Finished difference Result 89 states and 111 transitions. [2022-11-25 23:52:31,934 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:52:31,934 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-25 23:52:31,934 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:52:31,934 INFO L225 Difference]: With dead ends: 89 [2022-11-25 23:52:31,935 INFO L226 Difference]: Without dead ends: 87 [2022-11-25 23:52:31,935 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:52:31,935 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 5 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:52:31,936 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 20 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:52:31,937 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-11-25 23:52:31,938 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 83. [2022-11-25 23:52:31,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 80 states have (on average 1.275) internal successors, (102), 82 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:31,939 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 102 transitions. [2022-11-25 23:52:31,939 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 102 transitions. Word has length 20 [2022-11-25 23:52:31,941 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:52:31,941 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 102 transitions. [2022-11-25 23:52:31,941 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:31,941 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 102 transitions. [2022-11-25 23:52:31,941 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-25 23:52:31,942 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:52:31,942 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:52:31,942 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24 [2022-11-25 23:52:31,942 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:52:31,943 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:52:31,943 INFO L85 PathProgramCache]: Analyzing trace with hash -1201705847, now seen corresponding path program 1 times [2022-11-25 23:52:31,943 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:52:31,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [977627074] [2022-11-25 23:52:31,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:31,943 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:52:31,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:32,236 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-25 23:52:32,237 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:52:32,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [977627074] [2022-11-25 23:52:32,237 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [977627074] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:52:32,237 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:52:32,237 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 23:52:32,238 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [689378845] [2022-11-25 23:52:32,238 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:52:32,238 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-25 23:52:32,238 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:52:32,239 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-25 23:52:32,239 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-11-25 23:52:32,239 INFO L87 Difference]: Start difference. First operand 83 states and 102 transitions. Second operand has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:32,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:52:32,425 INFO L93 Difference]: Finished difference Result 86 states and 103 transitions. [2022-11-25 23:52:32,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-25 23:52:32,426 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-25 23:52:32,426 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:52:32,426 INFO L225 Difference]: With dead ends: 86 [2022-11-25 23:52:32,427 INFO L226 Difference]: Without dead ends: 70 [2022-11-25 23:52:32,427 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2022-11-25 23:52:32,427 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 18 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:52:32,427 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 66 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:52:32,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-25 23:52:32,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 68. [2022-11-25 23:52:32,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 65 states have (on average 1.2461538461538462) internal successors, (81), 67 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:32,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 81 transitions. [2022-11-25 23:52:32,430 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 81 transitions. Word has length 20 [2022-11-25 23:52:32,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:52:32,430 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 81 transitions. [2022-11-25 23:52:32,430 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:32,430 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 81 transitions. [2022-11-25 23:52:32,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-25 23:52:32,430 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:52:32,431 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:52:32,431 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable25 [2022-11-25 23:52:32,431 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:52:32,431 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:52:32,431 INFO L85 PathProgramCache]: Analyzing trace with hash 232221839, now seen corresponding path program 1 times [2022-11-25 23:52:32,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:52:32,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2071752669] [2022-11-25 23:52:32,432 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:32,432 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:52:32,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:32,727 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:52:32,727 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:52:32,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2071752669] [2022-11-25 23:52:32,728 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2071752669] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:52:32,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1465743694] [2022-11-25 23:52:32,728 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:32,728 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:32,728 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:52:32,731 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:52:32,750 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-25 23:52:32,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:32,842 INFO L263 TraceCheckSpWp]: Trace formula consists of 196 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-25 23:52:32,844 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:52:32,855 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:52:32,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 23:52:32,967 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:52:32,967 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:52:33,214 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:52:33,214 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1465743694] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:52:33,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [799310917] [2022-11-25 23:52:33,216 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:52:33,216 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:52:33,216 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:52:33,216 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:52:33,217 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:52:33,260 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:33,262 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:33,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:52:33,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:52:33,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:33,374 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:33,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:33,486 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:33,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:33,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:33,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:33,635 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:52:33,635 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:52:33,766 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:52:33,820 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-25 23:52:33,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-25 23:52:33,942 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:52:33,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:52:34,047 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:52:34,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:52:34,107 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:52:37,073 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4753#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:52:37,073 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:52:37,073 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:52:37,073 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 8] total 22 [2022-11-25 23:52:37,074 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1563581989] [2022-11-25 23:52:37,074 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:52:37,074 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-25 23:52:37,074 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:52:37,074 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-25 23:52:37,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=1145, Unknown=0, NotChecked=0, Total=1332 [2022-11-25 23:52:37,075 INFO L87 Difference]: Start difference. First operand 68 states and 81 transitions. Second operand has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:37,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:52:37,482 INFO L93 Difference]: Finished difference Result 84 states and 98 transitions. [2022-11-25 23:52:37,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-25 23:52:37,483 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-11-25 23:52:37,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:52:37,483 INFO L225 Difference]: With dead ends: 84 [2022-11-25 23:52:37,483 INFO L226 Difference]: Without dead ends: 84 [2022-11-25 23:52:37,484 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 517 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=302, Invalid=1590, Unknown=0, NotChecked=0, Total=1892 [2022-11-25 23:52:37,484 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 98 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 270 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 270 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:52:37,485 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [98 Valid, 41 Invalid, 275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 270 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:52:37,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-11-25 23:52:37,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 77. [2022-11-25 23:52:37,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 74 states have (on average 1.2297297297297298) internal successors, (91), 76 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:37,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 91 transitions. [2022-11-25 23:52:37,487 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 91 transitions. Word has length 21 [2022-11-25 23:52:37,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:52:37,487 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 91 transitions. [2022-11-25 23:52:37,488 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:37,488 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 91 transitions. [2022-11-25 23:52:37,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-25 23:52:37,488 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:52:37,488 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:52:37,499 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-11-25 23:52:37,689 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable26,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:37,689 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:52:37,689 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:52:37,689 INFO L85 PathProgramCache]: Analyzing trace with hash -817164504, now seen corresponding path program 1 times [2022-11-25 23:52:37,689 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:52:37,689 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [755120857] [2022-11-25 23:52:37,689 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:37,690 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:52:37,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:38,375 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:52:38,375 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:52:38,375 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [755120857] [2022-11-25 23:52:38,375 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [755120857] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:52:38,375 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1588786167] [2022-11-25 23:52:38,375 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:38,376 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:38,376 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:52:38,377 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:52:38,379 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-25 23:52:38,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:38,489 INFO L263 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 31 conjunts are in the unsatisfiable core [2022-11-25 23:52:38,491 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:52:38,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:38,733 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:52:38,734 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:52:38,735 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-25 23:52:38,757 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 23:52:38,758 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:52:38,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-25 23:52:38,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-25 23:52:39,059 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 3 proven. 4 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 23:52:39,060 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1588786167] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:52:39,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1880285955] [2022-11-25 23:52:39,061 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:52:39,062 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:52:39,062 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:52:39,062 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:52:39,062 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:52:39,098 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:39,101 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:39,102 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:52:39,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:52:39,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:39,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:39,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:39,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:39,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:39,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:39,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:39,471 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:52:39,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:52:39,629 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 23:52:39,630 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 23:52:39,717 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:52:39,717 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:52:39,835 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:52:39,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:52:39,896 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:52:42,998 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5102#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:52:42,998 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:52:42,998 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:52:42,998 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10, 10] total 28 [2022-11-25 23:52:42,999 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [770062164] [2022-11-25 23:52:42,999 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:52:42,999 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-25 23:52:42,999 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:52:43,000 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-25 23:52:43,000 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=1552, Unknown=0, NotChecked=0, Total=1722 [2022-11-25 23:52:43,001 INFO L87 Difference]: Start difference. First operand 77 states and 91 transitions. Second operand has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:45,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:52:45,031 INFO L93 Difference]: Finished difference Result 98 states and 110 transitions. [2022-11-25 23:52:45,032 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-25 23:52:45,033 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-11-25 23:52:45,033 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:52:45,033 INFO L225 Difference]: With dead ends: 98 [2022-11-25 23:52:45,033 INFO L226 Difference]: Without dead ends: 98 [2022-11-25 23:52:45,034 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 94 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 669 ImplicationChecksByTransitivity, 5.4s TimeCoverageRelationStatistics Valid=418, Invalid=2774, Unknown=0, NotChecked=0, Total=3192 [2022-11-25 23:52:45,035 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 285 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 438 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 285 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 446 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 438 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:52:45,035 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [285 Valid, 62 Invalid, 446 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 438 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 23:52:45,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-11-25 23:52:45,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 87. [2022-11-25 23:52:45,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 84 states have (on average 1.2023809523809523) internal successors, (101), 86 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:45,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 101 transitions. [2022-11-25 23:52:45,038 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 101 transitions. Word has length 23 [2022-11-25 23:52:45,038 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:52:45,038 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 101 transitions. [2022-11-25 23:52:45,038 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:45,038 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 101 transitions. [2022-11-25 23:52:45,039 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-25 23:52:45,039 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:52:45,039 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:52:45,051 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-25 23:52:45,239 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-25 23:52:45,239 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:52:45,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:52:45,240 INFO L85 PathProgramCache]: Analyzing trace with hash -534502090, now seen corresponding path program 5 times [2022-11-25 23:52:45,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:52:45,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1419692411] [2022-11-25 23:52:45,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:45,240 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:52:45,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:45,822 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:52:45,822 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:52:45,822 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1419692411] [2022-11-25 23:52:45,822 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1419692411] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:52:45,823 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [938374933] [2022-11-25 23:52:45,823 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:52:45,823 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:45,823 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:52:45,827 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:52:45,837 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-25 23:52:46,053 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-25 23:52:46,053 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:52:46,055 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-25 23:52:46,057 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:52:46,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:52:46,793 INFO L321 Elim1Store]: treesize reduction 17, result has 48.5 percent of original size [2022-11-25 23:52:46,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 41 treesize of output 34 [2022-11-25 23:52:46,829 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:52:46,829 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:52:47,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 51 [2022-11-25 23:52:47,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 45 [2022-11-25 23:52:47,918 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 16 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:52:47,919 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [938374933] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:52:47,919 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1415208998] [2022-11-25 23:52:47,920 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:52:47,920 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:52:47,920 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:52:47,921 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:52:47,921 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:52:47,962 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:47,965 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:47,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:52:48,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:48,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:48,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:48,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:48,214 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:52:48,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:52:48,294 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:52:50,068 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5509#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:52:50,068 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:52:50,068 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:52:50,068 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 18, 18] total 46 [2022-11-25 23:52:50,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1512133556] [2022-11-25 23:52:50,069 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:52:50,069 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-11-25 23:52:50,069 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:52:50,070 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-11-25 23:52:50,071 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=234, Invalid=2736, Unknown=0, NotChecked=0, Total=2970 [2022-11-25 23:52:50,071 INFO L87 Difference]: Start difference. First operand 87 states and 101 transitions. Second operand has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:56,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:52:56,835 INFO L93 Difference]: Finished difference Result 223 states and 243 transitions. [2022-11-25 23:52:56,835 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-11-25 23:52:56,836 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-11-25 23:52:56,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:52:56,836 INFO L225 Difference]: With dead ends: 223 [2022-11-25 23:52:56,837 INFO L226 Difference]: Without dead ends: 213 [2022-11-25 23:52:56,839 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2237 ImplicationChecksByTransitivity, 8.6s TimeCoverageRelationStatistics Valid=1421, Invalid=9085, Unknown=0, NotChecked=0, Total=10506 [2022-11-25 23:52:56,840 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 913 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 1863 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 913 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 1879 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 1863 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:52:56,840 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [913 Valid, 206 Invalid, 1879 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 1863 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-25 23:52:56,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2022-11-25 23:52:56,843 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 101. [2022-11-25 23:52:56,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 98 states have (on average 1.2142857142857142) internal successors, (119), 100 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:56,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 119 transitions. [2022-11-25 23:52:56,844 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 119 transitions. Word has length 23 [2022-11-25 23:52:56,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:52:56,844 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 119 transitions. [2022-11-25 23:52:56,845 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:52:56,845 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 119 transitions. [2022-11-25 23:52:56,845 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-25 23:52:56,845 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:52:56,845 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:52:56,856 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-25 23:52:57,046 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-25 23:52:57,046 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:52:57,046 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:52:57,046 INFO L85 PathProgramCache]: Analyzing trace with hash -1071471817, now seen corresponding path program 3 times [2022-11-25 23:52:57,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:52:57,047 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1616708111] [2022-11-25 23:52:57,047 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:52:57,047 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:52:57,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:52:57,874 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 6 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:52:57,875 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:52:57,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1616708111] [2022-11-25 23:52:57,875 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1616708111] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:52:57,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1800067243] [2022-11-25 23:52:57,875 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:52:57,875 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:52:57,875 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:52:57,879 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:52:57,906 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-25 23:52:58,034 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:52:58,034 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:52:58,036 INFO L263 TraceCheckSpWp]: Trace formula consists of 221 conjuncts, 50 conjunts are in the unsatisfiable core [2022-11-25 23:52:58,039 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:52:58,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:52:58,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:58,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 23:52:58,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 23:52:58,491 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-25 23:52:58,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-25 23:52:58,496 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:52:58,496 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:52:58,750 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:52:58,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 23:52:58,757 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:52:58,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 23:52:58,958 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:52:58,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1800067243] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:52:58,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [551641353] [2022-11-25 23:52:58,960 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:52:58,960 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:52:58,960 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:52:58,960 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:52:58,961 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:52:59,011 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:59,014 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:52:59,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:52:59,051 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:59,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:59,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:59,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:52:59,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:59,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:59,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:59,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:52:59,418 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:52:59,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:52:59,533 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:52:59,535 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:52:59,591 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-25 23:52:59,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-25 23:52:59,733 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:52:59,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:52:59,836 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:52:59,836 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:52:59,888 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:53:03,235 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6108#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:53:03,235 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:53:03,235 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:53:03,235 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 12, 12] total 32 [2022-11-25 23:53:03,236 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [23540491] [2022-11-25 23:53:03,236 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:53:03,238 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-25 23:53:03,239 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:03,239 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-25 23:53:03,240 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=159, Invalid=1890, Unknown=21, NotChecked=0, Total=2070 [2022-11-25 23:53:03,240 INFO L87 Difference]: Start difference. First operand 101 states and 119 transitions. Second operand has 32 states, 32 states have (on average 1.625) internal successors, (52), 32 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:04,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:04,196 INFO L93 Difference]: Finished difference Result 172 states and 201 transitions. [2022-11-25 23:53:04,196 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-25 23:53:04,197 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.625) internal successors, (52), 32 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-25 23:53:04,197 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:04,197 INFO L225 Difference]: With dead ends: 172 [2022-11-25 23:53:04,198 INFO L226 Difference]: Without dead ends: 152 [2022-11-25 23:53:04,198 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 40 SyntacticMatches, 2 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 2 DeprecatedPredicates, 836 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=323, Invalid=2848, Unknown=21, NotChecked=0, Total=3192 [2022-11-25 23:53:04,199 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 133 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 416 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 133 SdHoareTripleChecker+Valid, 167 SdHoareTripleChecker+Invalid, 432 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 416 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:04,199 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [133 Valid, 167 Invalid, 432 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 416 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 23:53:04,200 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2022-11-25 23:53:04,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 148. [2022-11-25 23:53:04,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 145 states have (on average 1.2206896551724138) internal successors, (177), 147 states have internal predecessors, (177), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:04,210 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 177 transitions. [2022-11-25 23:53:04,211 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 177 transitions. Word has length 24 [2022-11-25 23:53:04,211 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:04,211 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 177 transitions. [2022-11-25 23:53:04,211 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.625) internal successors, (52), 32 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:04,212 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 177 transitions. [2022-11-25 23:53:04,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-25 23:53:04,212 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:04,212 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:04,222 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-25 23:53:04,418 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:04,419 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:53:04,419 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:04,419 INFO L85 PathProgramCache]: Analyzing trace with hash -1014140731, now seen corresponding path program 2 times [2022-11-25 23:53:04,419 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:04,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1865096986] [2022-11-25 23:53:04,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:04,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:04,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:04,722 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 2 proven. 12 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:04,722 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:04,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1865096986] [2022-11-25 23:53:04,722 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1865096986] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:53:04,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [547594661] [2022-11-25 23:53:04,723 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:53:04,723 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:04,723 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:04,728 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:53:04,768 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-25 23:53:04,880 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-25 23:53:04,881 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:53:04,883 INFO L263 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 45 conjunts are in the unsatisfiable core [2022-11-25 23:53:04,885 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:53:05,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:05,076 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:53:05,076 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-25 23:53:05,277 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 3 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-25 23:53:05,277 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:53:05,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-25 23:53:05,484 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-25 23:53:05,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 45 treesize of output 37 [2022-11-25 23:53:05,980 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-25 23:53:05,981 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [547594661] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:53:05,981 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1768180880] [2022-11-25 23:53:05,984 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:53:05,984 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:53:05,984 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:53:05,984 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:53:05,985 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:53:06,025 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:06,028 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:06,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:53:06,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:53:06,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:06,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:06,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:06,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:06,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:06,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:06,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:06,427 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:53:06,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:53:06,556 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 23:53:06,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 23:53:06,642 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:53:06,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:53:06,749 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:53:06,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:53:06,825 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:53:09,826 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6637#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:53:09,827 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:53:09,827 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:53:09,827 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 28 [2022-11-25 23:53:09,827 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [309063308] [2022-11-25 23:53:09,827 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:53:09,828 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-25 23:53:09,828 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:09,828 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-25 23:53:09,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=174, Invalid=1632, Unknown=0, NotChecked=0, Total=1806 [2022-11-25 23:53:09,829 INFO L87 Difference]: Start difference. First operand 148 states and 177 transitions. Second operand has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:12,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:12,399 INFO L93 Difference]: Finished difference Result 191 states and 220 transitions. [2022-11-25 23:53:12,400 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-25 23:53:12,400 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-25 23:53:12,400 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:12,401 INFO L225 Difference]: With dead ends: 191 [2022-11-25 23:53:12,401 INFO L226 Difference]: Without dead ends: 184 [2022-11-25 23:53:12,402 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 73 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1153 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=855, Invalid=4695, Unknown=0, NotChecked=0, Total=5550 [2022-11-25 23:53:12,402 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 376 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 704 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 376 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 718 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 704 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:12,402 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [376 Valid, 62 Invalid, 718 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 704 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-25 23:53:12,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-11-25 23:53:12,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 152. [2022-11-25 23:53:12,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 149 states have (on average 1.2080536912751678) internal successors, (180), 151 states have internal predecessors, (180), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:12,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 180 transitions. [2022-11-25 23:53:12,407 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 180 transitions. Word has length 25 [2022-11-25 23:53:12,407 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:12,407 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 180 transitions. [2022-11-25 23:53:12,408 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:12,408 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 180 transitions. [2022-11-25 23:53:12,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-25 23:53:12,409 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:12,409 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:12,418 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-25 23:53:12,614 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:12,615 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:53:12,615 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:12,615 INFO L85 PathProgramCache]: Analyzing trace with hash 1165606884, now seen corresponding path program 4 times [2022-11-25 23:53:12,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:12,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1937186860] [2022-11-25 23:53:12,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:12,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:12,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:12,817 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-25 23:53:12,817 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:12,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1937186860] [2022-11-25 23:53:12,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1937186860] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:53:12,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [439294342] [2022-11-25 23:53:12,818 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:53:12,818 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:12,818 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:12,820 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:53:12,850 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-25 23:53:12,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:12,971 INFO L263 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-25 23:53:12,972 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:53:13,158 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 7 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-25 23:53:13,158 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:53:13,355 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-25 23:53:13,356 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [439294342] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:53:13,356 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1359259621] [2022-11-25 23:53:13,357 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:53:13,357 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:53:13,358 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:53:13,358 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:53:13,358 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:53:13,405 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:13,410 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:13,411 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:53:13,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:13,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:13,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:13,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:13,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:13,662 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:13,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:13,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:13,781 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:53:13,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:53:13,904 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:53:13,959 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-25 23:53:13,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-25 23:53:14,090 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:53:14,090 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:53:14,185 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:53:14,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:53:14,248 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:53:17,200 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7231#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:53:17,200 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:53:17,200 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:53:17,201 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 23 [2022-11-25 23:53:17,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1422660407] [2022-11-25 23:53:17,201 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:53:17,201 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-25 23:53:17,201 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:17,202 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-25 23:53:17,202 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=189, Invalid=1143, Unknown=0, NotChecked=0, Total=1332 [2022-11-25 23:53:17,202 INFO L87 Difference]: Start difference. First operand 152 states and 180 transitions. Second operand has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:17,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:17,718 INFO L93 Difference]: Finished difference Result 153 states and 177 transitions. [2022-11-25 23:53:17,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-25 23:53:17,718 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-11-25 23:53:17,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:17,719 INFO L225 Difference]: With dead ends: 153 [2022-11-25 23:53:17,719 INFO L226 Difference]: Without dead ends: 151 [2022-11-25 23:53:17,720 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 95 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 631 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=330, Invalid=1832, Unknown=0, NotChecked=0, Total=2162 [2022-11-25 23:53:17,721 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 142 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 161 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 165 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 161 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:17,721 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 121 Invalid, 165 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 161 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:53:17,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-11-25 23:53:17,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 148. [2022-11-25 23:53:17,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 145 states have (on average 1.206896551724138) internal successors, (175), 147 states have internal predecessors, (175), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:17,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 175 transitions. [2022-11-25 23:53:17,726 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 175 transitions. Word has length 26 [2022-11-25 23:53:17,727 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:17,727 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 175 transitions. [2022-11-25 23:53:17,727 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:17,727 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 175 transitions. [2022-11-25 23:53:17,728 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-25 23:53:17,728 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:17,728 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:17,741 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-25 23:53:17,941 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-11-25 23:53:17,941 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:53:17,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:17,942 INFO L85 PathProgramCache]: Analyzing trace with hash -275718690, now seen corresponding path program 3 times [2022-11-25 23:53:17,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:17,942 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2040601206] [2022-11-25 23:53:17,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:17,942 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:17,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:18,591 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:18,592 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:18,592 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2040601206] [2022-11-25 23:53:18,592 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2040601206] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:53:18,592 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2141987237] [2022-11-25 23:53:18,592 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:53:18,592 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:18,592 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:18,603 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:53:18,630 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-25 23:53:18,769 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:53:18,769 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:53:18,772 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-25 23:53:18,774 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:53:19,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:53:19,317 INFO L321 Elim1Store]: treesize reduction 9, result has 47.1 percent of original size [2022-11-25 23:53:19,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 18 [2022-11-25 23:53:19,349 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 4 proven. 12 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 23:53:19,349 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:53:19,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-11-25 23:53:19,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-11-25 23:53:19,880 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 9 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 23:53:19,880 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2141987237] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:53:19,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [524143669] [2022-11-25 23:53:19,882 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:53:19,883 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:53:19,883 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:53:19,883 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:53:19,883 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:53:19,932 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:19,934 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:19,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:53:19,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:20,008 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:20,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:20,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:53:20,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:20,170 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:20,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:20,240 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:20,286 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:53:20,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:53:20,401 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 23:53:20,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 23:53:20,510 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:53:20,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:53:20,607 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:53:20,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:53:20,666 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:53:24,020 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7758#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:53:24,020 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:53:24,020 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:53:24,021 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13, 13] total 36 [2022-11-25 23:53:24,021 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1238680180] [2022-11-25 23:53:24,021 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:53:24,021 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-25 23:53:24,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:24,022 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-25 23:53:24,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=189, Invalid=2261, Unknown=0, NotChecked=0, Total=2450 [2022-11-25 23:53:24,022 INFO L87 Difference]: Start difference. First operand 148 states and 175 transitions. Second operand has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:28,969 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:28,969 INFO L93 Difference]: Finished difference Result 207 states and 229 transitions. [2022-11-25 23:53:28,974 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-11-25 23:53:28,975 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-25 23:53:28,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:28,975 INFO L225 Difference]: With dead ends: 207 [2022-11-25 23:53:28,976 INFO L226 Difference]: Without dead ends: 194 [2022-11-25 23:53:28,977 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 86 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1646 ImplicationChecksByTransitivity, 8.5s TimeCoverageRelationStatistics Valid=1005, Invalid=6651, Unknown=0, NotChecked=0, Total=7656 [2022-11-25 23:53:28,977 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 640 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 990 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 640 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 1000 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 990 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:28,977 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [640 Valid, 120 Invalid, 1000 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 990 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-25 23:53:28,978 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 194 states. [2022-11-25 23:53:28,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 194 to 152. [2022-11-25 23:53:28,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 149 states have (on average 1.1812080536912752) internal successors, (176), 151 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:28,982 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 176 transitions. [2022-11-25 23:53:28,982 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 176 transitions. Word has length 27 [2022-11-25 23:53:28,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:28,983 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 176 transitions. [2022-11-25 23:53:28,983 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:28,983 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 176 transitions. [2022-11-25 23:53:28,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-25 23:53:28,984 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:28,984 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:28,991 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-25 23:53:29,190 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-11-25 23:53:29,190 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:53:29,191 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:29,191 INFO L85 PathProgramCache]: Analyzing trace with hash -71799316, now seen corresponding path program 6 times [2022-11-25 23:53:29,191 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:29,191 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1068700979] [2022-11-25 23:53:29,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:29,191 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:29,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:29,878 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:29,878 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:29,878 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1068700979] [2022-11-25 23:53:29,878 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1068700979] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:53:29,879 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [965883743] [2022-11-25 23:53:29,879 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:53:29,879 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:29,879 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:29,882 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:53:29,883 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-25 23:53:30,023 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:53:30,023 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:53:30,025 INFO L263 TraceCheckSpWp]: Trace formula consists of 216 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-25 23:53:30,027 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:53:30,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:31,175 INFO L321 Elim1Store]: treesize reduction 21, result has 48.8 percent of original size [2022-11-25 23:53:31,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 58 treesize of output 42 [2022-11-25 23:53:31,216 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 5 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:31,217 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:53:31,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 74 treesize of output 64 [2022-11-25 23:53:31,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 74 treesize of output 56 [2022-11-25 23:53:32,862 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 25 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:32,862 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [965883743] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:53:32,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [773711267] [2022-11-25 23:53:32,864 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:53:32,864 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:53:32,864 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:53:32,865 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:53:32,865 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:53:32,902 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:32,904 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:32,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:53:32,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:33,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:33,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:33,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:33,164 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:53:33,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:53:33,232 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:53:35,196 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8417#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:53:35,196 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:53:35,196 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:53:35,197 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 21, 21] total 54 [2022-11-25 23:53:35,197 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [970312392] [2022-11-25 23:53:35,197 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:53:35,197 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-25 23:53:35,197 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:35,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-25 23:53:35,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=304, Invalid=3602, Unknown=0, NotChecked=0, Total=3906 [2022-11-25 23:53:35,199 INFO L87 Difference]: Start difference. First operand 152 states and 176 transitions. Second operand has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:45,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:45,610 INFO L93 Difference]: Finished difference Result 383 states and 420 transitions. [2022-11-25 23:53:45,610 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-11-25 23:53:45,610 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-25 23:53:45,611 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:45,612 INFO L225 Difference]: With dead ends: 383 [2022-11-25 23:53:45,612 INFO L226 Difference]: Without dead ends: 371 [2022-11-25 23:53:45,613 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 121 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3431 ImplicationChecksByTransitivity, 13.0s TimeCoverageRelationStatistics Valid=1970, Invalid=13036, Unknown=0, NotChecked=0, Total=15006 [2022-11-25 23:53:45,613 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 1290 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 2105 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1290 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 2134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 2105 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:45,614 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1290 Valid, 205 Invalid, 2134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 2105 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-25 23:53:45,614 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 371 states. [2022-11-25 23:53:45,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 371 to 184. [2022-11-25 23:53:45,619 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 181 states have (on average 1.1988950276243093) internal successors, (217), 183 states have internal predecessors, (217), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:45,620 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 217 transitions. [2022-11-25 23:53:45,620 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 217 transitions. Word has length 27 [2022-11-25 23:53:45,620 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:45,620 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 217 transitions. [2022-11-25 23:53:45,621 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:45,621 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 217 transitions. [2022-11-25 23:53:45,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-25 23:53:45,621 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:45,622 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:45,628 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-25 23:53:45,828 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33,23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:45,828 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:53:45,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:45,829 INFO L85 PathProgramCache]: Analyzing trace with hash -533783897, now seen corresponding path program 5 times [2022-11-25 23:53:45,829 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:45,829 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [777643864] [2022-11-25 23:53:45,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:45,829 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:45,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:46,134 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:53:46,135 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:46,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [777643864] [2022-11-25 23:53:46,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [777643864] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:53:46,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [170847729] [2022-11-25 23:53:46,135 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:53:46,135 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:46,135 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:46,139 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:53:46,151 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-25 23:53:46,428 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 23:53:46,428 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:53:46,430 INFO L263 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-25 23:53:46,432 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:53:46,572 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:53:46,572 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:53:46,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:53:46,800 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:53:46,800 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [170847729] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:53:46,800 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1879200723] [2022-11-25 23:53:46,802 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:53:46,802 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:53:46,802 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:53:46,802 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:53:46,803 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:53:46,845 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:46,847 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:46,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:53:46,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:53:46,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:46,949 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:47,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:47,058 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:47,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:47,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:47,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:47,228 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:53:47,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:53:47,345 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:53:47,401 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-25 23:53:47,402 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-25 23:53:47,545 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:53:47,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:53:47,656 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:53:47,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:53:47,716 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:53:50,946 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9298#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:53:50,946 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:53:50,947 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:53:50,947 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-11-25 23:53:50,947 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1635432842] [2022-11-25 23:53:50,947 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:53:50,947 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-25 23:53:50,947 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:50,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-25 23:53:50,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=152, Invalid=1180, Unknown=0, NotChecked=0, Total=1332 [2022-11-25 23:53:50,948 INFO L87 Difference]: Start difference. First operand 184 states and 217 transitions. Second operand has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:51,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:51,537 INFO L93 Difference]: Finished difference Result 201 states and 230 transitions. [2022-11-25 23:53:51,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-25 23:53:51,537 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-25 23:53:51,537 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:51,538 INFO L225 Difference]: With dead ends: 201 [2022-11-25 23:53:51,538 INFO L226 Difference]: Without dead ends: 201 [2022-11-25 23:53:51,539 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 54 SyntacticMatches, 3 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 449 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=294, Invalid=1868, Unknown=0, NotChecked=0, Total=2162 [2022-11-25 23:53:51,539 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 170 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 552 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 554 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 552 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:51,540 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [170 Valid, 148 Invalid, 554 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 552 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 23:53:51,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2022-11-25 23:53:51,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 193. [2022-11-25 23:53:51,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 193 states, 190 states have (on average 1.1894736842105262) internal successors, (226), 192 states have internal predecessors, (226), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:51,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 226 transitions. [2022-11-25 23:53:51,545 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 226 transitions. Word has length 28 [2022-11-25 23:53:51,546 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:51,546 INFO L495 AbstractCegarLoop]: Abstraction has 193 states and 226 transitions. [2022-11-25 23:53:51,546 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:51,546 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 226 transitions. [2022-11-25 23:53:51,547 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-25 23:53:51,547 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:51,547 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:51,553 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-25 23:53:51,753 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-25 23:53:51,753 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:53:51,753 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:51,753 INFO L85 PathProgramCache]: Analyzing trace with hash 282419348, now seen corresponding path program 4 times [2022-11-25 23:53:51,754 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:51,754 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1575370530] [2022-11-25 23:53:51,754 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:51,754 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:51,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:52,279 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:52,279 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:52,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1575370530] [2022-11-25 23:53:52,279 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1575370530] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:53:52,280 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1803509448] [2022-11-25 23:53:52,280 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:53:52,280 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:52,280 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:52,283 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:53:52,310 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-25 23:53:52,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:52,442 INFO L263 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 45 conjunts are in the unsatisfiable core [2022-11-25 23:53:52,444 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:53:52,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:53,094 INFO L321 Elim1Store]: treesize reduction 17, result has 50.0 percent of original size [2022-11-25 23:53:53,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 38 treesize of output 31 [2022-11-25 23:53:53,127 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 6 proven. 23 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 23:53:53,127 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:53:53,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-25 23:53:53,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 68 treesize of output 58 [2022-11-25 23:53:53,912 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 13 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 23:53:53,912 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1803509448] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:53:53,912 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1390295502] [2022-11-25 23:53:53,914 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:53:53,914 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:53:53,914 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:53:53,914 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:53:53,915 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:53:53,949 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:53,952 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:53,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:53:53,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:53:54,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:54,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:54,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:54,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:54,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:54,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:54,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:54,334 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:53:54,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:53:54,453 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 23:53:54,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 23:53:54,536 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:53:54,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:53:54,650 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:53:54,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:53:54,699 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:53:58,109 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9949#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:53:58,109 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:53:58,109 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:53:58,109 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 16, 16] total 43 [2022-11-25 23:53:58,109 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [830416044] [2022-11-25 23:53:58,110 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:53:58,110 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-11-25 23:53:58,110 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:58,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-11-25 23:53:58,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=239, Invalid=2953, Unknown=0, NotChecked=0, Total=3192 [2022-11-25 23:53:58,111 INFO L87 Difference]: Start difference. First operand 193 states and 226 transitions. Second operand has 43 states, 43 states have (on average 1.8372093023255813) internal successors, (79), 43 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:04,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:04,546 INFO L93 Difference]: Finished difference Result 306 states and 335 transitions. [2022-11-25 23:54:04,546 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-11-25 23:54:04,546 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 43 states have (on average 1.8372093023255813) internal successors, (79), 43 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-25 23:54:04,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:04,548 INFO L225 Difference]: With dead ends: 306 [2022-11-25 23:54:04,548 INFO L226 Difference]: Without dead ends: 291 [2022-11-25 23:54:04,549 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2914 ImplicationChecksByTransitivity, 10.0s TimeCoverageRelationStatistics Valid=1632, Invalid=10578, Unknown=0, NotChecked=0, Total=12210 [2022-11-25 23:54:04,550 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 966 mSDsluCounter, 137 mSDsCounter, 0 mSdLazyCounter, 1342 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 966 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 1357 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 1342 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:04,550 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [966 Valid, 148 Invalid, 1357 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 1342 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-25 23:54:04,551 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2022-11-25 23:54:04,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 195. [2022-11-25 23:54:04,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 195 states, 192 states have (on average 1.1666666666666667) internal successors, (224), 194 states have internal predecessors, (224), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:04,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 195 states to 195 states and 224 transitions. [2022-11-25 23:54:04,557 INFO L78 Accepts]: Start accepts. Automaton has 195 states and 224 transitions. Word has length 31 [2022-11-25 23:54:04,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:04,557 INFO L495 AbstractCegarLoop]: Abstraction has 195 states and 224 transitions. [2022-11-25 23:54:04,557 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 43 states have (on average 1.8372093023255813) internal successors, (79), 43 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:04,558 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 224 transitions. [2022-11-25 23:54:04,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-25 23:54:04,558 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:04,559 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:04,566 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:04,765 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-25 23:54:04,766 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:54:04,766 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:04,766 INFO L85 PathProgramCache]: Analyzing trace with hash -1766708574, now seen corresponding path program 7 times [2022-11-25 23:54:04,766 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:04,766 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2042815016] [2022-11-25 23:54:04,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:04,767 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:04,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:05,526 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:05,526 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:05,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2042815016] [2022-11-25 23:54:05,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2042815016] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:05,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1397345524] [2022-11-25 23:54:05,527 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:54:05,527 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:05,527 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:05,531 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:05,554 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-25 23:54:05,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:05,708 INFO L263 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 71 conjunts are in the unsatisfiable core [2022-11-25 23:54:05,712 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:06,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:07,036 INFO L321 Elim1Store]: treesize reduction 25, result has 49.0 percent of original size [2022-11-25 23:54:07,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 68 treesize of output 50 [2022-11-25 23:54:07,078 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 6 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:07,078 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:07,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 89 treesize of output 77 [2022-11-25 23:54:07,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 15 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 0 case distinctions, treesize of input 89 treesize of output 67 [2022-11-25 23:54:09,098 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-25 23:54:09,099 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 36 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:09,100 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1397345524] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:09,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1111992882] [2022-11-25 23:54:09,101 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:54:09,101 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:09,102 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:09,102 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:09,102 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:09,138 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:09,140 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:09,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:09,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:09,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:09,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:09,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:09,388 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:09,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:09,457 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:11,371 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10814#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:11,371 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:11,372 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:11,372 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 24, 24] total 62 [2022-11-25 23:54:11,372 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1189440462] [2022-11-25 23:54:11,372 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:11,372 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-25 23:54:11,373 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:11,373 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-25 23:54:11,374 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=377, Invalid=4593, Unknown=0, NotChecked=0, Total=4970 [2022-11-25 23:54:11,374 INFO L87 Difference]: Start difference. First operand 195 states and 224 transitions. Second operand has 62 states, 62 states have (on average 1.435483870967742) internal successors, (89), 62 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:26,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:26,581 INFO L93 Difference]: Finished difference Result 543 states and 592 transitions. [2022-11-25 23:54:26,581 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 82 states. [2022-11-25 23:54:26,581 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 62 states have (on average 1.435483870967742) internal successors, (89), 62 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-25 23:54:26,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:26,582 INFO L225 Difference]: With dead ends: 543 [2022-11-25 23:54:26,583 INFO L226 Difference]: Without dead ends: 529 [2022-11-25 23:54:26,584 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 149 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5419 ImplicationChecksByTransitivity, 17.1s TimeCoverageRelationStatistics Valid=2815, Invalid=19835, Unknown=0, NotChecked=0, Total=22650 [2022-11-25 23:54:26,585 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 1765 mSDsluCounter, 262 mSDsCounter, 0 mSdLazyCounter, 3189 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1765 SdHoareTripleChecker+Valid, 273 SdHoareTripleChecker+Invalid, 3245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 3189 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:26,586 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1765 Valid, 273 Invalid, 3245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 3189 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2022-11-25 23:54:26,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529 states. [2022-11-25 23:54:26,593 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529 to 231. [2022-11-25 23:54:26,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 228 states have (on average 1.1842105263157894) internal successors, (270), 230 states have internal predecessors, (270), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:26,594 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 270 transitions. [2022-11-25 23:54:26,594 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 270 transitions. Word has length 31 [2022-11-25 23:54:26,595 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:26,595 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 270 transitions. [2022-11-25 23:54:26,595 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 62 states have (on average 1.435483870967742) internal successors, (89), 62 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:26,595 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 270 transitions. [2022-11-25 23:54:26,596 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-25 23:54:26,596 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:26,596 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:26,606 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:26,802 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-25 23:54:26,802 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:54:26,802 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:26,802 INFO L85 PathProgramCache]: Analyzing trace with hash -1471045521, now seen corresponding path program 6 times [2022-11-25 23:54:26,803 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:26,803 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1510345966] [2022-11-25 23:54:26,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:26,803 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:26,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:27,883 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 6 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:27,883 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:27,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1510345966] [2022-11-25 23:54:27,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1510345966] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:27,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1573017731] [2022-11-25 23:54:27,883 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:54:27,883 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:27,884 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:27,887 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:27,914 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-25 23:54:28,080 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:54:28,081 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:54:28,084 INFO L263 TraceCheckSpWp]: Trace formula consists of 278 conjuncts, 89 conjunts are in the unsatisfiable core [2022-11-25 23:54:28,086 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:28,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:28,610 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:54:28,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-11-25 23:54:28,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-25 23:54:29,034 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-25 23:54:29,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 43 treesize of output 53 [2022-11-25 23:54:29,063 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:29,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 7 [2022-11-25 23:54:29,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-11-25 23:54:29,465 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:29,465 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:29,467 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:29,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-11-25 23:54:29,476 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 6 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:29,477 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:30,288 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:30,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 34 [2022-11-25 23:54:30,299 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:30,299 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 58 treesize of output 57 [2022-11-25 23:54:30,316 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:30,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 20 [2022-11-25 23:54:30,324 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-25 23:54:31,427 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 10 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:31,428 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1573017731] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:31,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1377713725] [2022-11-25 23:54:31,429 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:54:31,429 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:31,429 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:31,429 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:31,429 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:31,462 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:31,464 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:31,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:31,501 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:31,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:31,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:31,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:31,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:31,710 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:31,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:31,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:31,855 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:31,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:31,954 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:32,007 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-25 23:54:32,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-25 23:54:32,116 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:54:32,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:54:32,211 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:54:32,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:54:32,258 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:36,316 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12001#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:36,316 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:36,316 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:36,316 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 23, 23] total 58 [2022-11-25 23:54:36,316 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2022997747] [2022-11-25 23:54:36,316 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:36,317 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2022-11-25 23:54:36,317 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:36,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2022-11-25 23:54:36,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=362, Invalid=4683, Unknown=67, NotChecked=0, Total=5112 [2022-11-25 23:54:36,320 INFO L87 Difference]: Start difference. First operand 231 states and 270 transitions. Second operand has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:53,766 WARN L233 SmtUtils]: Spent 12.36s on a formula simplification. DAG size of input: 81 DAG size of output: 73 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-25 23:54:56,321 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2022-11-25 23:54:56,994 WARN L837 $PredicateComparison]: unable to prove that (let ((.cse2 (= |c_ULTIMATE.start_main_~nondetString1~0#1.base| |c_ULTIMATE.start_main_~nondetString2~0#1.base|))) (let ((.cse0 (+ |c_ULTIMATE.start_main_~length3~0#1| |c_ULTIMATE.start_main_~length1~0#1|)) (.cse1 (not .cse2))) (and (forall ((v_ArrVal_967 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_967) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) (= 0 |c_ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 3 |c_ULTIMATE.start_main_~length1~0#1|) (< 2 |c_ULTIMATE.start_main_~length1~0#1|) (<= .cse0 |c_ULTIMATE.start_main_~length2~0#1|) .cse1 (= |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |c_ULTIMATE.start_main_~i~0#1|) (not (< |c_ULTIMATE.start_main_~length2~0#1| .cse0)) (<= |c_ULTIMATE.start_main_~i~0#1| 2) (or (and .cse1 (= |c_ULTIMATE.start_main_~length1~0#1| 1)) (and (= 3 |c_ULTIMATE.start_main_~length1~0#1|) .cse1) (not (<= 1 (+ |c_ULTIMATE.start_main_~length3~0#1| |c_ULTIMATE.start_main_~nondetString2~0#1.offset|))) (and (= |c_ULTIMATE.start_main_~nondetString1~0#1.offset| |c_ULTIMATE.start_main_~nondetString2~0#1.offset|) .cse2))))) is different from false [2022-11-25 23:54:59,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:59,139 INFO L93 Difference]: Finished difference Result 388 states and 443 transitions. [2022-11-25 23:54:59,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 61 states. [2022-11-25 23:54:59,140 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-11-25 23:54:59,140 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:59,141 INFO L225 Difference]: With dead ends: 388 [2022-11-25 23:54:59,142 INFO L226 Difference]: Without dead ends: 312 [2022-11-25 23:54:59,143 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 168 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 124 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 3526 ImplicationChecksByTransitivity, 26.4s TimeCoverageRelationStatistics Valid=1666, Invalid=13745, Unknown=93, NotChecked=246, Total=15750 [2022-11-25 23:54:59,144 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 544 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 1078 mSolverCounterSat, 44 mSolverCounterUnsat, 24 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 544 SdHoareTripleChecker+Valid, 318 SdHoareTripleChecker+Invalid, 1147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 1078 IncrementalHoareTripleChecker+Invalid, 24 IncrementalHoareTripleChecker+Unknown, 1 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:59,144 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [544 Valid, 318 Invalid, 1147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 1078 Invalid, 24 Unknown, 1 Unchecked, 3.2s Time] [2022-11-25 23:54:59,145 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 312 states. [2022-11-25 23:54:59,149 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 312 to 298. [2022-11-25 23:54:59,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 295 states have (on average 1.1830508474576271) internal successors, (349), 297 states have internal predecessors, (349), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:59,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 349 transitions. [2022-11-25 23:54:59,151 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 349 transitions. Word has length 32 [2022-11-25 23:54:59,151 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:59,152 INFO L495 AbstractCegarLoop]: Abstraction has 298 states and 349 transitions. [2022-11-25 23:54:59,152 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:59,152 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 349 transitions. [2022-11-25 23:54:59,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-25 23:54:59,153 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:59,153 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:59,159 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:59,359 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable37,27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:59,359 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:54:59,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:59,360 INFO L85 PathProgramCache]: Analyzing trace with hash 207279946, now seen corresponding path program 5 times [2022-11-25 23:54:59,360 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:59,360 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1842095415] [2022-11-25 23:54:59,360 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:59,360 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:59,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:00,098 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:55:00,099 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:55:00,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1842095415] [2022-11-25 23:55:00,099 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1842095415] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:55:00,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1634715779] [2022-11-25 23:55:00,099 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:55:00,099 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:00,100 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:55:00,103 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:55:00,130 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-25 23:55:00,397 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-25 23:55:00,397 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:55:00,400 INFO L263 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 84 conjunts are in the unsatisfiable core [2022-11-25 23:55:00,403 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:55:00,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:55:01,457 INFO L321 Elim1Store]: treesize reduction 12, result has 84.4 percent of original size [2022-11-25 23:55:01,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 9 case distinctions, treesize of input 41 treesize of output 83 [2022-11-25 23:55:02,014 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 5 proven. 24 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-25 23:55:02,014 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:55:03,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 47 [2022-11-25 23:55:03,405 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:03,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 5 case distinctions, treesize of input 71 treesize of output 105 [2022-11-25 23:55:03,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 34 [2022-11-25 23:55:04,476 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 0 proven. 29 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-25 23:55:04,476 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1634715779] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:04,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [64011323] [2022-11-25 23:55:04,477 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:55:04,478 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:04,478 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:04,478 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:04,478 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:04,513 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:04,515 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:04,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:04,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:55:04,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:04,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:04,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:04,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:04,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:04,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:04,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:04,882 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:55:04,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:55:05,030 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 23:55:05,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 23:55:05,124 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:55:05,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:55:05,218 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:55:05,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:55:05,268 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:09,421 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13067#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:55:09,421 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:09,421 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:09,422 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 19] total 53 [2022-11-25 23:55:09,422 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1624593277] [2022-11-25 23:55:09,422 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:09,422 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-25 23:55:09,422 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:09,423 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-25 23:55:09,423 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=328, Invalid=4228, Unknown=0, NotChecked=0, Total=4556 [2022-11-25 23:55:09,423 INFO L87 Difference]: Start difference. First operand 298 states and 349 transitions. Second operand has 54 states, 53 states have (on average 1.679245283018868) internal successors, (89), 54 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:28,263 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:55:28,264 INFO L93 Difference]: Finished difference Result 453 states and 507 transitions. [2022-11-25 23:55:28,266 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 116 states. [2022-11-25 23:55:28,267 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 53 states have (on average 1.679245283018868) internal successors, (89), 54 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-25 23:55:28,267 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:55:28,268 INFO L225 Difference]: With dead ends: 453 [2022-11-25 23:55:28,268 INFO L226 Difference]: Without dead ends: 400 [2022-11-25 23:55:28,272 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 234 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 180 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9017 ImplicationChecksByTransitivity, 23.1s TimeCoverageRelationStatistics Valid=4239, Invalid=28703, Unknown=0, NotChecked=0, Total=32942 [2022-11-25 23:55:28,273 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 967 mSDsluCounter, 144 mSDsCounter, 0 mSdLazyCounter, 2549 mSolverCounterSat, 103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 967 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 2652 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 103 IncrementalHoareTripleChecker+Valid, 2549 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2022-11-25 23:55:28,273 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [967 Valid, 153 Invalid, 2652 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [103 Valid, 2549 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2022-11-25 23:55:28,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 400 states. [2022-11-25 23:55:28,279 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 400 to 300. [2022-11-25 23:55:28,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 297 states have (on average 1.1717171717171717) internal successors, (348), 299 states have internal predecessors, (348), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:28,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 348 transitions. [2022-11-25 23:55:28,281 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 348 transitions. Word has length 35 [2022-11-25 23:55:28,281 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:55:28,282 INFO L495 AbstractCegarLoop]: Abstraction has 300 states and 348 transitions. [2022-11-25 23:55:28,282 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 53 states have (on average 1.679245283018868) internal successors, (89), 54 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:28,282 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 348 transitions. [2022-11-25 23:55:28,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-25 23:55:28,283 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:55:28,283 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:55:28,291 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-25 23:55:28,498 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-25 23:55:28,498 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:55:28,498 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:55:28,499 INFO L85 PathProgramCache]: Analyzing trace with hash -1157391528, now seen corresponding path program 8 times [2022-11-25 23:55:28,499 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:55:28,499 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1621541151] [2022-11-25 23:55:28,499 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:28,499 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:55:28,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:29,599 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 25 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:55:29,600 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:55:29,600 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1621541151] [2022-11-25 23:55:29,600 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1621541151] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:55:29,600 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [460247186] [2022-11-25 23:55:29,600 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:55:29,600 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:29,600 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:55:29,603 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:55:29,630 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-25 23:55:29,946 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-11-25 23:55:29,946 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:55:29,949 INFO L263 TraceCheckSpWp]: Trace formula consists of 264 conjuncts, 88 conjunts are in the unsatisfiable core [2022-11-25 23:55:29,951 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:55:30,626 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:55:31,953 INFO L321 Elim1Store]: treesize reduction 29, result has 49.1 percent of original size [2022-11-25 23:55:31,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 21 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 65 treesize of output 58 [2022-11-25 23:55:31,961 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-25 23:55:32,012 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 7 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:55:32,012 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:55:33,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 90 [2022-11-25 23:55:33,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 7 select indices, 7 select index equivalence classes, 21 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 78 [2022-11-25 23:55:35,164 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-25 23:55:35,175 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 49 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:55:35,175 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [460247186] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:35,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1563033460] [2022-11-25 23:55:35,177 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:55:35,177 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:35,178 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:35,178 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:35,178 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:35,220 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:35,223 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:35,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:35,282 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:35,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:35,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:35,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:35,473 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:55:35,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:55:35,545 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:38,027 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14336#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:55:38,027 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:38,028 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:38,028 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 27, 27] total 70 [2022-11-25 23:55:38,028 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1178436629] [2022-11-25 23:55:38,028 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:38,028 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 70 states [2022-11-25 23:55:38,028 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:38,029 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 70 interpolants. [2022-11-25 23:55:38,030 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=429, Invalid=5733, Unknown=0, NotChecked=0, Total=6162 [2022-11-25 23:55:38,030 INFO L87 Difference]: Start difference. First operand 300 states and 348 transitions. Second operand has 70 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 70 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:15,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:56:15,393 INFO L93 Difference]: Finished difference Result 780 states and 843 transitions. [2022-11-25 23:56:15,393 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 100 states. [2022-11-25 23:56:15,394 INFO L78 Accepts]: Start accepts. Automaton has has 70 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 70 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-25 23:56:15,394 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:56:15,396 INFO L225 Difference]: With dead ends: 780 [2022-11-25 23:56:15,396 INFO L226 Difference]: Without dead ends: 748 [2022-11-25 23:56:15,399 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 221 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 175 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7177 ImplicationChecksByTransitivity, 40.3s TimeCoverageRelationStatistics Valid=3637, Invalid=27515, Unknown=0, NotChecked=0, Total=31152 [2022-11-25 23:56:15,399 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 1965 mSDsluCounter, 353 mSDsCounter, 0 mSdLazyCounter, 4418 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1965 SdHoareTripleChecker+Valid, 365 SdHoareTripleChecker+Invalid, 4468 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 4418 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2022-11-25 23:56:15,400 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1965 Valid, 365 Invalid, 4468 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 4418 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2022-11-25 23:56:15,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 748 states. [2022-11-25 23:56:15,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 748 to 334. [2022-11-25 23:56:15,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 334 states, 331 states have (on average 1.1782477341389728) internal successors, (390), 333 states have internal predecessors, (390), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:15,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 334 states to 334 states and 390 transitions. [2022-11-25 23:56:15,410 INFO L78 Accepts]: Start accepts. Automaton has 334 states and 390 transitions. Word has length 35 [2022-11-25 23:56:15,410 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:56:15,411 INFO L495 AbstractCegarLoop]: Abstraction has 334 states and 390 transitions. [2022-11-25 23:56:15,411 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 70 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 70 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:15,411 INFO L276 IsEmpty]: Start isEmpty. Operand 334 states and 390 transitions. [2022-11-25 23:56:15,412 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-25 23:56:15,412 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:56:15,412 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:56:15,424 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Ended with exit code 0 [2022-11-25 23:56:15,618 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-25 23:56:15,619 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:56:15,619 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:56:15,619 INFO L85 PathProgramCache]: Analyzing trace with hash -1976859297, now seen corresponding path program 7 times [2022-11-25 23:56:15,620 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:56:15,620 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1902285014] [2022-11-25 23:56:15,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:56:15,620 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:56:15,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:16,044 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:56:16,044 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:56:16,044 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1902285014] [2022-11-25 23:56:16,044 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1902285014] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:56:16,044 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1834054521] [2022-11-25 23:56:16,044 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:56:16,044 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:16,045 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:56:16,045 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:56:16,048 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-25 23:56:16,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:16,204 INFO L263 TraceCheckSpWp]: Trace formula consists of 304 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-25 23:56:16,205 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:56:16,399 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:56:16,399 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:56:16,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:56:16,736 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:56:16,736 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1834054521] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:56:16,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1933968880] [2022-11-25 23:56:16,737 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:56:16,737 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:56:16,738 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:56:16,738 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:56:16,738 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:56:16,772 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:16,774 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:16,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:56:16,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:56:16,854 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:16,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:16,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:16,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:17,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:17,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:17,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:17,146 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:56:17,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:56:17,242 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:56:17,300 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-25 23:56:17,301 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-25 23:56:17,401 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:56:17,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:56:17,496 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:56:17,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:56:17,544 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:56:20,967 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15892#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:56:20,967 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:56:20,967 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:56:20,967 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 26 [2022-11-25 23:56:20,967 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [709450146] [2022-11-25 23:56:20,967 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:56:20,968 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-25 23:56:20,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:56:20,968 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-25 23:56:20,969 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=171, Invalid=1469, Unknown=0, NotChecked=0, Total=1640 [2022-11-25 23:56:20,969 INFO L87 Difference]: Start difference. First operand 334 states and 390 transitions. Second operand has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:21,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:56:21,779 INFO L93 Difference]: Finished difference Result 367 states and 416 transitions. [2022-11-25 23:56:21,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-25 23:56:21,780 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-25 23:56:21,780 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:56:21,782 INFO L225 Difference]: With dead ends: 367 [2022-11-25 23:56:21,782 INFO L226 Difference]: Without dead ends: 367 [2022-11-25 23:56:21,783 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 131 GetRequests, 75 SyntacticMatches, 4 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 656 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=386, Invalid=2476, Unknown=0, NotChecked=0, Total=2862 [2022-11-25 23:56:21,783 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 216 mSDsluCounter, 163 mSDsCounter, 0 mSdLazyCounter, 603 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 216 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 605 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 603 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:56:21,783 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [216 Valid, 179 Invalid, 605 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 603 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 23:56:21,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 367 states. [2022-11-25 23:56:21,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 367 to 347. [2022-11-25 23:56:21,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 344 states have (on average 1.1715116279069768) internal successors, (403), 346 states have internal predecessors, (403), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:21,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 403 transitions. [2022-11-25 23:56:21,792 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 403 transitions. Word has length 36 [2022-11-25 23:56:21,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:56:21,792 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 403 transitions. [2022-11-25 23:56:21,792 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:21,792 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 403 transitions. [2022-11-25 23:56:21,793 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-25 23:56:21,793 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:56:21,793 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:56:21,810 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-25 23:56:21,999 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:22,000 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:56:22,000 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:56:22,000 INFO L85 PathProgramCache]: Analyzing trace with hash 1835991054, now seen corresponding path program 9 times [2022-11-25 23:56:22,000 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:56:22,000 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1370733108] [2022-11-25 23:56:22,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:56:22,000 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:56:22,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:23,015 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 36 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:56:23,015 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:56:23,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1370733108] [2022-11-25 23:56:23,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1370733108] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:56:23,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [748151344] [2022-11-25 23:56:23,016 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:56:23,016 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:23,016 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:56:23,017 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:56:23,019 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-25 23:56:23,226 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:56:23,226 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:56:23,229 INFO L263 TraceCheckSpWp]: Trace formula consists of 288 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-25 23:56:23,232 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:56:23,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:25,789 INFO L321 Elim1Store]: treesize reduction 33, result has 49.2 percent of original size [2022-11-25 23:56:25,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 88 treesize of output 66 [2022-11-25 23:56:25,792 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-25 23:56:25,851 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 8 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:56:25,852 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:56:27,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 103 [2022-11-25 23:56:27,386 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 28 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 89 [2022-11-25 23:56:29,717 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-25 23:56:29,723 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 64 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:56:29,724 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [748151344] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:56:29,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1996142051] [2022-11-25 23:56:29,725 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:56:29,725 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:56:29,726 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:56:29,726 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:56:29,726 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:56:29,772 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:29,774 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:29,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:56:29,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:56:29,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:29,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:29,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:29,989 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:56:29,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:56:30,052 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:56:32,474 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16952#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:56:32,475 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:56:32,475 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:56:32,475 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 30, 30] total 78 [2022-11-25 23:56:32,475 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [717346960] [2022-11-25 23:56:32,475 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:56:32,475 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 78 states [2022-11-25 23:56:32,476 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:56:32,476 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 78 interpolants. [2022-11-25 23:56:32,477 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=550, Invalid=6932, Unknown=0, NotChecked=0, Total=7482 [2022-11-25 23:56:32,477 INFO L87 Difference]: Start difference. First operand 347 states and 403 transitions. Second operand has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:07,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:57:07,671 INFO L93 Difference]: Finished difference Result 1055 states and 1141 transitions. [2022-11-25 23:57:07,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 129 states. [2022-11-25 23:57:07,672 INFO L78 Accepts]: Start accepts. Automaton has has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-25 23:57:07,672 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:57:07,675 INFO L225 Difference]: With dead ends: 1055 [2022-11-25 23:57:07,675 INFO L226 Difference]: Without dead ends: 1019 [2022-11-25 23:57:07,677 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 264 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 212 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11795 ImplicationChecksByTransitivity, 37.8s TimeCoverageRelationStatistics Valid=5138, Invalid=40444, Unknown=0, NotChecked=0, Total=45582 [2022-11-25 23:57:07,678 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 2266 mSDsluCounter, 426 mSDsCounter, 0 mSdLazyCounter, 5237 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2266 SdHoareTripleChecker+Valid, 440 SdHoareTripleChecker+Invalid, 5282 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 5237 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:57:07,678 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2266 Valid, 440 Invalid, 5282 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 5237 Invalid, 0 Unknown, 0 Unchecked, 5.1s Time] [2022-11-25 23:57:07,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1019 states. [2022-11-25 23:57:07,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1019 to 381. [2022-11-25 23:57:07,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 381 states, 378 states have (on average 1.1772486772486772) internal successors, (445), 380 states have internal predecessors, (445), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:07,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 381 states to 381 states and 445 transitions. [2022-11-25 23:57:07,691 INFO L78 Accepts]: Start accepts. Automaton has 381 states and 445 transitions. Word has length 39 [2022-11-25 23:57:07,691 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:57:07,691 INFO L495 AbstractCegarLoop]: Abstraction has 381 states and 445 transitions. [2022-11-25 23:57:07,691 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:07,691 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 445 transitions. [2022-11-25 23:57:07,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-25 23:57:07,692 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:57:07,693 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:57:07,699 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-25 23:57:07,899 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:07,899 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:57:07,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:57:07,900 INFO L85 PathProgramCache]: Analyzing trace with hash -735449305, now seen corresponding path program 8 times [2022-11-25 23:57:07,900 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:57:07,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1674972099] [2022-11-25 23:57:07,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:57:07,900 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:57:07,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:09,316 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 8 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:57:09,316 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:57:09,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1674972099] [2022-11-25 23:57:09,316 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1674972099] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:57:09,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [153947648] [2022-11-25 23:57:09,316 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:57:09,317 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:09,317 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:57:09,317 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:57:09,320 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-25 23:57:09,610 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-25 23:57:09,610 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:57:09,613 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 115 conjunts are in the unsatisfiable core [2022-11-25 23:57:09,616 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:57:09,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:57:09,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:57:09,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 23:57:10,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 23:57:10,144 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 23:57:10,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 23:57:10,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-25 23:57:10,388 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:57:10,389 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:57:11,712 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1243 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1243) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-25 23:57:11,721 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1243 (Array Int Int)) (v_ArrVal_1241 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1241) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1243) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-25 23:57:11,731 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1243 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1243) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-25 23:57:11,762 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1243 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1243) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-25 23:57:11,777 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:57:11,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 23:57:11,788 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:57:11,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 23:57:11,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-25 23:57:12,152 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 8 proven. 19 refuted. 0 times theorem prover too weak. 16 trivial. 14 not checked. [2022-11-25 23:57:12,153 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [153947648] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:57:12,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1146932911] [2022-11-25 23:57:12,154 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:57:12,155 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:57:12,155 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:57:12,155 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:57:12,155 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:57:12,194 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:12,197 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:12,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:57:12,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:12,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:12,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:12,359 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:12,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:12,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:12,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:12,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:12,547 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:57:12,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:57:12,644 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:57:12,648 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:57:12,709 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-25 23:57:12,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-25 23:57:12,824 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:57:12,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:57:12,915 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:57:12,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:57:12,964 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:57:17,072 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18933#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:57:17,073 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:57:17,073 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:57:17,073 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 18, 18] total 48 [2022-11-25 23:57:17,073 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1784541810] [2022-11-25 23:57:17,073 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:57:17,073 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-25 23:57:17,074 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:57:17,074 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-25 23:57:17,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=230, Invalid=3071, Unknown=21, NotChecked=460, Total=3782 [2022-11-25 23:57:17,075 INFO L87 Difference]: Start difference. First operand 381 states and 445 transitions. Second operand has 48 states, 48 states have (on average 1.8333333333333333) internal successors, (88), 48 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:20,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:57:20,472 INFO L93 Difference]: Finished difference Result 593 states and 685 transitions. [2022-11-25 23:57:20,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-11-25 23:57:20,473 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 1.8333333333333333) internal successors, (88), 48 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-25 23:57:20,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:57:20,474 INFO L225 Difference]: With dead ends: 593 [2022-11-25 23:57:20,475 INFO L226 Difference]: Without dead ends: 529 [2022-11-25 23:57:20,475 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 81 SyntacticMatches, 2 SemanticMatches, 88 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 1774 ImplicationChecksByTransitivity, 8.9s TimeCoverageRelationStatistics Valid=573, Invalid=6731, Unknown=22, NotChecked=684, Total=8010 [2022-11-25 23:57:20,476 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 284 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 1567 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 284 SdHoareTripleChecker+Valid, 462 SdHoareTripleChecker+Invalid, 1966 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 1567 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 379 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:57:20,476 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [284 Valid, 462 Invalid, 1966 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 1567 Invalid, 0 Unknown, 379 Unchecked, 1.2s Time] [2022-11-25 23:57:20,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529 states. [2022-11-25 23:57:20,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529 to 494. [2022-11-25 23:57:20,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 494 states, 491 states have (on average 1.1812627291242364) internal successors, (580), 493 states have internal predecessors, (580), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:20,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 494 states to 494 states and 580 transitions. [2022-11-25 23:57:20,488 INFO L78 Accepts]: Start accepts. Automaton has 494 states and 580 transitions. Word has length 40 [2022-11-25 23:57:20,488 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:57:20,488 INFO L495 AbstractCegarLoop]: Abstraction has 494 states and 580 transitions. [2022-11-25 23:57:20,489 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 1.8333333333333333) internal successors, (88), 48 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:20,489 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 580 transitions. [2022-11-25 23:57:20,490 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-25 23:57:20,490 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:57:20,490 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:57:20,506 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-25 23:57:20,697 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-11-25 23:57:20,697 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:57:20,697 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:57:20,698 INFO L85 PathProgramCache]: Analyzing trace with hash -786413679, now seen corresponding path program 6 times [2022-11-25 23:57:20,698 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:57:20,698 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [198632504] [2022-11-25 23:57:20,698 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:57:20,698 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:57:20,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:21,384 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 5 proven. 24 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-25 23:57:21,384 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:57:21,384 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [198632504] [2022-11-25 23:57:21,384 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [198632504] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:57:21,384 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [273465321] [2022-11-25 23:57:21,384 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:57:21,385 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:21,385 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:57:21,387 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:57:21,410 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-25 23:57:21,753 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:57:21,753 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:57:21,756 INFO L263 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-25 23:57:21,758 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:57:22,151 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:22,205 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:57:22,207 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:57:22,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-25 23:57:22,212 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 8 proven. 21 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-25 23:57:22,212 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:57:22,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-25 23:57:22,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-25 23:57:22,671 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 13 proven. 16 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-25 23:57:22,672 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [273465321] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:57:22,672 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [765851056] [2022-11-25 23:57:22,673 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:57:22,674 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:57:22,674 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:57:22,674 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:57:22,674 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:57:22,707 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:22,710 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:22,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:57:22,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:22,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:22,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:22,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:57:22,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:22,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:23,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:23,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:23,096 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:57:23,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:57:23,223 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 23:57:23,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 23:57:23,329 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:57:23,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:57:23,444 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:57:23,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:57:23,506 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:57:26,893 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20365#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:57:26,893 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:57:26,894 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:57:26,894 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 35 [2022-11-25 23:57:26,894 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [856980668] [2022-11-25 23:57:26,894 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:57:26,894 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-25 23:57:26,894 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:57:26,895 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-25 23:57:26,895 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=282, Invalid=2070, Unknown=0, NotChecked=0, Total=2352 [2022-11-25 23:57:26,895 INFO L87 Difference]: Start difference. First operand 494 states and 580 transitions. Second operand has 35 states, 35 states have (on average 1.9714285714285715) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:28,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:57:28,528 INFO L93 Difference]: Finished difference Result 541 states and 621 transitions. [2022-11-25 23:57:28,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-25 23:57:28,529 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 35 states have (on average 1.9714285714285715) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-25 23:57:28,529 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:57:28,530 INFO L225 Difference]: With dead ends: 541 [2022-11-25 23:57:28,530 INFO L226 Difference]: Without dead ends: 537 [2022-11-25 23:57:28,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 154 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1283 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=712, Invalid=3844, Unknown=0, NotChecked=0, Total=4556 [2022-11-25 23:57:28,531 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 289 mSDsluCounter, 212 mSDsCounter, 0 mSdLazyCounter, 446 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 289 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 452 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 446 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:57:28,531 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [289 Valid, 227 Invalid, 452 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 446 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 23:57:28,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 537 states. [2022-11-25 23:57:28,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 537 to 482. [2022-11-25 23:57:28,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 482 states, 479 states have (on average 1.1795407098121085) internal successors, (565), 481 states have internal predecessors, (565), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:28,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 482 states to 482 states and 565 transitions. [2022-11-25 23:57:28,542 INFO L78 Accepts]: Start accepts. Automaton has 482 states and 565 transitions. Word has length 41 [2022-11-25 23:57:28,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:57:28,543 INFO L495 AbstractCegarLoop]: Abstraction has 482 states and 565 transitions. [2022-11-25 23:57:28,543 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 35 states have (on average 1.9714285714285715) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:28,543 INFO L276 IsEmpty]: Start isEmpty. Operand 482 states and 565 transitions. [2022-11-25 23:57:28,544 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-25 23:57:28,544 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:57:28,545 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:57:28,552 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-11-25 23:57:28,751 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-11-25 23:57:28,752 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:57:28,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:57:28,752 INFO L85 PathProgramCache]: Analyzing trace with hash -824464203, now seen corresponding path program 7 times [2022-11-25 23:57:28,752 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:57:28,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1687212627] [2022-11-25 23:57:28,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:57:28,753 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:57:28,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:29,771 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 12 proven. 35 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-25 23:57:29,772 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:57:29,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1687212627] [2022-11-25 23:57:29,772 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1687212627] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:57:29,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1548314003] [2022-11-25 23:57:29,772 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:57:29,772 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:29,772 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:57:29,773 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:57:29,775 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-25 23:57:29,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:29,948 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 52 conjunts are in the unsatisfiable core [2022-11-25 23:57:29,949 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:57:30,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:57:30,751 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:57:30,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 15 [2022-11-25 23:57:30,755 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 13 proven. 34 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-25 23:57:30,755 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:57:30,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-25 23:57:30,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 34 [2022-11-25 23:57:31,699 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 22 proven. 25 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-25 23:57:31,700 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1548314003] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:57:31,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2047354245] [2022-11-25 23:57:31,701 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:57:31,702 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:57:31,702 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:57:31,702 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:57:31,703 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:57:31,747 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:31,750 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:31,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:57:31,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:31,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:31,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:31,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:57:31,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:32,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:32,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:32,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:32,141 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:57:32,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:57:32,274 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 23:57:32,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 23:57:32,360 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:57:32,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:57:32,461 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:57:32,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:57:32,513 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:57:36,416 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21727#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:57:36,416 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:57:36,416 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:57:36,416 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 47 [2022-11-25 23:57:36,416 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1039940722] [2022-11-25 23:57:36,416 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:57:36,417 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-11-25 23:57:36,417 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:57:36,417 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-11-25 23:57:36,418 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=348, Invalid=3312, Unknown=0, NotChecked=0, Total=3660 [2022-11-25 23:57:36,418 INFO L87 Difference]: Start difference. First operand 482 states and 565 transitions. Second operand has 47 states, 47 states have (on average 1.7446808510638299) internal successors, (82), 47 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:38,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:57:38,114 INFO L93 Difference]: Finished difference Result 568 states and 646 transitions. [2022-11-25 23:57:38,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-25 23:57:38,114 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 1.7446808510638299) internal successors, (82), 47 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-25 23:57:38,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:57:38,117 INFO L225 Difference]: With dead ends: 568 [2022-11-25 23:57:38,117 INFO L226 Difference]: Without dead ends: 552 [2022-11-25 23:57:38,117 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 78 SyntacticMatches, 2 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1970 ImplicationChecksByTransitivity, 6.7s TimeCoverageRelationStatistics Valid=1014, Invalid=6296, Unknown=0, NotChecked=0, Total=7310 [2022-11-25 23:57:38,118 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 407 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 520 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 407 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 530 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 520 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:57:38,118 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [407 Valid, 146 Invalid, 530 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 520 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 23:57:38,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 552 states. [2022-11-25 23:57:38,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 552 to 460. [2022-11-25 23:57:38,127 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 460 states, 457 states have (on average 1.1772428884026258) internal successors, (538), 459 states have internal predecessors, (538), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:38,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 460 states to 460 states and 538 transitions. [2022-11-25 23:57:38,128 INFO L78 Accepts]: Start accepts. Automaton has 460 states and 538 transitions. Word has length 41 [2022-11-25 23:57:38,128 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:57:38,128 INFO L495 AbstractCegarLoop]: Abstraction has 460 states and 538 transitions. [2022-11-25 23:57:38,128 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 1.7446808510638299) internal successors, (82), 47 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:38,129 INFO L276 IsEmpty]: Start isEmpty. Operand 460 states and 538 transitions. [2022-11-25 23:57:38,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-25 23:57:38,130 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:57:38,130 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:57:38,138 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-25 23:57:38,335 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable44,34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:38,336 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:57:38,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:57:38,336 INFO L85 PathProgramCache]: Analyzing trace with hash -493612588, now seen corresponding path program 9 times [2022-11-25 23:57:38,336 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:57:38,336 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [583872518] [2022-11-25 23:57:38,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:57:38,337 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:57:38,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:38,648 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-11-25 23:57:38,648 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:57:38,648 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [583872518] [2022-11-25 23:57:38,649 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [583872518] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:57:38,649 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1230462687] [2022-11-25 23:57:38,649 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:57:38,649 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:38,649 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:57:38,650 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:57:38,674 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-25 23:57:39,125 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:57:39,125 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:57:39,128 INFO L263 TraceCheckSpWp]: Trace formula consists of 348 conjuncts, 15 conjunts are in the unsatisfiable core [2022-11-25 23:57:39,129 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:57:39,476 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 9 proven. 23 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-11-25 23:57:39,477 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:57:39,886 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 16 proven. 16 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-11-25 23:57:39,886 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1230462687] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:57:39,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1416159464] [2022-11-25 23:57:39,887 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:57:39,888 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:57:39,888 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:57:39,888 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:57:39,888 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:57:39,936 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:39,938 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:39,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:57:39,977 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:40,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:40,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:40,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:40,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:40,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:40,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:40,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:40,289 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:57:40,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:57:40,402 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:57:40,460 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-25 23:57:40,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-25 23:57:40,563 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:57:40,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:57:40,659 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:57:40,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:57:40,709 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:57:44,111 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23100#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:57:44,111 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:57:44,111 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:57:44,112 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13, 13] total 35 [2022-11-25 23:57:44,112 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1112400056] [2022-11-25 23:57:44,112 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:57:44,112 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-25 23:57:44,112 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:57:44,113 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-25 23:57:44,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=319, Invalid=2033, Unknown=0, NotChecked=0, Total=2352 [2022-11-25 23:57:44,113 INFO L87 Difference]: Start difference. First operand 460 states and 538 transitions. Second operand has 35 states, 35 states have (on average 2.0285714285714285) internal successors, (71), 35 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:45,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:57:45,220 INFO L93 Difference]: Finished difference Result 490 states and 561 transitions. [2022-11-25 23:57:45,220 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-25 23:57:45,220 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 35 states have (on average 2.0285714285714285) internal successors, (71), 35 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-25 23:57:45,220 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:57:45,223 INFO L225 Difference]: With dead ends: 490 [2022-11-25 23:57:45,223 INFO L226 Difference]: Without dead ends: 488 [2022-11-25 23:57:45,223 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1353 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=715, Invalid=3707, Unknown=0, NotChecked=0, Total=4422 [2022-11-25 23:57:45,224 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 311 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 355 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 311 SdHoareTripleChecker+Valid, 217 SdHoareTripleChecker+Invalid, 361 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 355 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:57:45,224 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [311 Valid, 217 Invalid, 361 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 355 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 23:57:45,225 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 488 states. [2022-11-25 23:57:45,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 488 to 456. [2022-11-25 23:57:45,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 456 states, 453 states have (on average 1.1766004415011038) internal successors, (533), 455 states have internal predecessors, (533), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:45,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 456 states to 456 states and 533 transitions. [2022-11-25 23:57:45,234 INFO L78 Accepts]: Start accepts. Automaton has 456 states and 533 transitions. Word has length 42 [2022-11-25 23:57:45,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:57:45,234 INFO L495 AbstractCegarLoop]: Abstraction has 456 states and 533 transitions. [2022-11-25 23:57:45,234 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 35 states have (on average 2.0285714285714285) internal successors, (71), 35 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:45,234 INFO L276 IsEmpty]: Start isEmpty. Operand 456 states and 533 transitions. [2022-11-25 23:57:45,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-25 23:57:45,236 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:57:45,236 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:57:45,246 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-25 23:57:45,445 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-11-25 23:57:45,445 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:57:45,445 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:57:45,445 INFO L85 PathProgramCache]: Analyzing trace with hash -308079726, now seen corresponding path program 8 times [2022-11-25 23:57:45,446 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:57:45,446 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1142269857] [2022-11-25 23:57:45,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:57:45,446 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:57:45,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:46,503 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 16 proven. 50 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:57:46,503 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:57:46,503 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1142269857] [2022-11-25 23:57:46,503 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1142269857] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:57:46,503 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [135296642] [2022-11-25 23:57:46,503 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:57:46,503 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:46,504 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:57:46,504 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:57:46,508 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-25 23:57:46,867 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-25 23:57:46,867 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:57:46,870 INFO L263 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-25 23:57:46,872 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:57:46,892 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:57:46,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 23:57:47,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:57:47,888 INFO L321 Elim1Store]: treesize reduction 12, result has 84.4 percent of original size [2022-11-25 23:57:47,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 9 case distinctions, treesize of input 41 treesize of output 83 [2022-11-25 23:57:48,576 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 6 proven. 34 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-25 23:57:48,577 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:57:50,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 47 [2022-11-25 23:57:50,202 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:57:50,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 5 case distinctions, treesize of input 71 treesize of output 105 [2022-11-25 23:57:51,585 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 4 proven. 46 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-25 23:57:51,586 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [135296642] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:57:51,586 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1386769285] [2022-11-25 23:57:51,587 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:57:51,587 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:57:51,587 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:57:51,587 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:57:51,588 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:57:51,622 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:51,625 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:51,626 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:57:51,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:57:51,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:51,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:51,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:57:51,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:51,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:51,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:51,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:52,008 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:57:52,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:57:52,155 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 23:57:52,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 23:57:52,250 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:57:52,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:57:52,361 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:57:52,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:57:52,411 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:57:56,951 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24405#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:57:56,951 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:57:56,951 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:57:56,951 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 19, 20] total 56 [2022-11-25 23:57:56,951 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1506849864] [2022-11-25 23:57:56,951 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:57:56,952 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-11-25 23:57:56,952 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:57:56,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-11-25 23:57:56,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=356, Invalid=4614, Unknown=0, NotChecked=0, Total=4970 [2022-11-25 23:57:56,953 INFO L87 Difference]: Start difference. First operand 456 states and 533 transitions. Second operand has 57 states, 56 states have (on average 1.9464285714285714) internal successors, (109), 57 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:22,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:58:22,362 INFO L93 Difference]: Finished difference Result 703 states and 790 transitions. [2022-11-25 23:58:22,363 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 127 states. [2022-11-25 23:58:22,363 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 56 states have (on average 1.9464285714285714) internal successors, (109), 57 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-25 23:58:22,363 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:58:22,366 INFO L225 Difference]: With dead ends: 703 [2022-11-25 23:58:22,366 INFO L226 Difference]: Without dead ends: 616 [2022-11-25 23:58:22,367 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 271 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 194 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10315 ImplicationChecksByTransitivity, 29.8s TimeCoverageRelationStatistics Valid=4676, Invalid=33544, Unknown=0, NotChecked=0, Total=38220 [2022-11-25 23:58:22,368 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 1478 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 3424 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1478 SdHoareTripleChecker+Valid, 251 SdHoareTripleChecker+Invalid, 3520 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 3424 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.5s IncrementalHoareTripleChecker+Time [2022-11-25 23:58:22,368 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1478 Valid, 251 Invalid, 3520 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 3424 Invalid, 0 Unknown, 0 Unchecked, 3.5s Time] [2022-11-25 23:58:22,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 616 states. [2022-11-25 23:58:22,374 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 616 to 442. [2022-11-25 23:58:22,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 442 states, 439 states have (on average 1.1594533029612757) internal successors, (509), 441 states have internal predecessors, (509), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:22,376 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 442 states to 442 states and 509 transitions. [2022-11-25 23:58:22,376 INFO L78 Accepts]: Start accepts. Automaton has 442 states and 509 transitions. Word has length 43 [2022-11-25 23:58:22,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:58:22,376 INFO L495 AbstractCegarLoop]: Abstraction has 442 states and 509 transitions. [2022-11-25 23:58:22,376 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 56 states have (on average 1.9464285714285714) internal successors, (109), 57 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:22,377 INFO L276 IsEmpty]: Start isEmpty. Operand 442 states and 509 transitions. [2022-11-25 23:58:22,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-25 23:58:22,378 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:58:22,378 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:58:22,387 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-25 23:58:22,584 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-11-25 23:58:22,584 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:58:22,585 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:58:22,585 INFO L85 PathProgramCache]: Analyzing trace with hash 159815876, now seen corresponding path program 10 times [2022-11-25 23:58:22,585 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:58:22,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1389346981] [2022-11-25 23:58:22,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:58:22,585 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:58:22,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:58:23,880 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 49 proven. 113 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:58:23,880 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:58:23,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1389346981] [2022-11-25 23:58:23,880 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1389346981] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:58:23,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1578333608] [2022-11-25 23:58:23,881 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:58:23,881 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:58:23,881 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:58:23,882 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:58:23,884 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-25 23:58:24,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:58:24,071 INFO L263 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 97 conjunts are in the unsatisfiable core [2022-11-25 23:58:24,074 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:58:25,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:58:26,935 INFO L321 Elim1Store]: treesize reduction 37, result has 49.3 percent of original size [2022-11-25 23:58:26,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 10 select indices, 10 select index equivalence classes, 36 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 45 case distinctions, treesize of input 81 treesize of output 74 [2022-11-25 23:58:26,938 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-25 23:58:27,015 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 9 proven. 153 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:58:27,016 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:58:28,975 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 134 treesize of output 116 [2022-11-25 23:58:28,983 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:58:28,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 9 select indices, 9 select index equivalence classes, 0 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 134 treesize of output 100 [2022-11-25 23:58:31,475 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 81 proven. 81 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:58:31,476 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1578333608] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:58:31,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2025013607] [2022-11-25 23:58:31,477 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:58:31,477 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:58:31,477 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:58:31,478 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:58:31,478 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:58:31,508 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:58:31,511 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:58:31,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:58:31,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:58:31,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:31,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:31,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:31,713 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:58:31,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:58:31,796 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:58:34,541 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '26153#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:58:34,541 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:58:34,541 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:58:34,541 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 33, 33] total 87 [2022-11-25 23:58:34,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1781663965] [2022-11-25 23:58:34,542 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:58:34,542 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 87 states [2022-11-25 23:58:34,542 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:58:34,543 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 87 interpolants. [2022-11-25 23:58:34,543 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=664, Invalid=8456, Unknown=0, NotChecked=0, Total=9120 [2022-11-25 23:58:34,543 INFO L87 Difference]: Start difference. First operand 442 states and 509 transitions. Second operand has 87 states, 87 states have (on average 1.4482758620689655) internal successors, (126), 87 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:48,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:59:48,302 INFO L93 Difference]: Finished difference Result 1301 states and 1405 transitions. [2022-11-25 23:59:48,302 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 145 states. [2022-11-25 23:59:48,303 INFO L78 Accepts]: Start accepts. Automaton has has 87 states, 87 states have (on average 1.4482758620689655) internal successors, (126), 87 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-25 23:59:48,303 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:59:48,307 INFO L225 Difference]: With dead ends: 1301 [2022-11-25 23:59:48,307 INFO L226 Difference]: Without dead ends: 1281 [2022-11-25 23:59:48,310 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 293 GetRequests, 56 SyntacticMatches, 1 SemanticMatches, 236 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14498 ImplicationChecksByTransitivity, 76.5s TimeCoverageRelationStatistics Valid=6308, Invalid=50098, Unknown=0, NotChecked=0, Total=56406 [2022-11-25 23:59:48,310 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 3419 mSDsluCounter, 463 mSDsCounter, 0 mSdLazyCounter, 6269 mSolverCounterSat, 131 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3419 SdHoareTripleChecker+Valid, 477 SdHoareTripleChecker+Invalid, 6400 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 131 IncrementalHoareTripleChecker+Valid, 6269 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:59:48,311 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3419 Valid, 477 Invalid, 6400 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [131 Valid, 6269 Invalid, 0 Unknown, 0 Unchecked, 6.1s Time] [2022-11-25 23:59:48,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1281 states. [2022-11-25 23:59:48,321 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1281 to 536. [2022-11-25 23:59:48,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 536 states, 533 states have (on average 1.1632270168855534) internal successors, (620), 535 states have internal predecessors, (620), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:48,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 536 states to 536 states and 620 transitions. [2022-11-25 23:59:48,324 INFO L78 Accepts]: Start accepts. Automaton has 536 states and 620 transitions. Word has length 43 [2022-11-25 23:59:48,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:59:48,324 INFO L495 AbstractCegarLoop]: Abstraction has 536 states and 620 transitions. [2022-11-25 23:59:48,324 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 87 states, 87 states have (on average 1.4482758620689655) internal successors, (126), 87 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:48,325 INFO L276 IsEmpty]: Start isEmpty. Operand 536 states and 620 transitions. [2022-11-25 23:59:48,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-25 23:59:48,326 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:59:48,326 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:59:48,333 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-11-25 23:59:48,532 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-11-25 23:59:48,533 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:59:48,533 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:59:48,533 INFO L85 PathProgramCache]: Analyzing trace with hash 1448059287, now seen corresponding path program 10 times [2022-11-25 23:59:48,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:59:48,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1988371760] [2022-11-25 23:59:48,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:59:48,533 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:59:48,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:59:49,012 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 4 proven. 44 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:59:49,013 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:59:49,013 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1988371760] [2022-11-25 23:59:49,013 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1988371760] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:59:49,013 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [322657022] [2022-11-25 23:59:49,013 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:59:49,013 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:59:49,013 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:59:49,014 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:59:49,017 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-25 23:59:49,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:59:49,221 INFO L263 TraceCheckSpWp]: Trace formula consists of 361 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-25 23:59:49,223 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:59:49,533 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:59:49,533 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:59:49,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:59:50,033 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:59:50,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [322657022] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:59:50,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1226408210] [2022-11-25 23:59:50,035 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:59:50,035 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:59:50,036 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:59:50,036 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:59:50,036 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:59:50,075 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:59:50,078 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:59:50,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:59:50,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:50,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:50,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:50,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:50,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:50,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:50,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:50,389 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:50,456 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:59:50,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:59:50,547 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:59:50,549 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:59:50,608 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-25 23:59:50,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-25 23:59:50,716 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:59:50,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:59:50,814 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:59:50,814 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:59:50,876 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:59:54,434 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '28572#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:59:54,434 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:59:54,434 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:59:54,434 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 30 [2022-11-25 23:59:54,435 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [24486033] [2022-11-25 23:59:54,435 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:59:54,435 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-25 23:59:54,435 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:59:54,436 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-25 23:59:54,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1786, Unknown=0, NotChecked=0, Total=1980 [2022-11-25 23:59:54,436 INFO L87 Difference]: Start difference. First operand 536 states and 620 transitions. Second operand has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:55,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:59:55,514 INFO L93 Difference]: Finished difference Result 590 states and 665 transitions. [2022-11-25 23:59:55,514 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-25 23:59:55,515 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-11-25 23:59:55,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:59:55,517 INFO L225 Difference]: With dead ends: 590 [2022-11-25 23:59:55,518 INFO L226 Difference]: Without dead ends: 590 [2022-11-25 23:59:55,518 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 96 SyntacticMatches, 5 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 893 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=497, Invalid=3163, Unknown=0, NotChecked=0, Total=3660 [2022-11-25 23:59:55,518 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 351 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 773 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 351 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 775 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 773 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 23:59:55,519 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [351 Valid, 221 Invalid, 775 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 773 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-25 23:59:55,519 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 590 states. [2022-11-25 23:59:55,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 590 to 549. [2022-11-25 23:59:55,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 549 states, 546 states have (on average 1.1593406593406594) internal successors, (633), 548 states have internal predecessors, (633), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:55,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 549 states to 549 states and 633 transitions. [2022-11-25 23:59:55,529 INFO L78 Accepts]: Start accepts. Automaton has 549 states and 633 transitions. Word has length 44 [2022-11-25 23:59:55,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:59:55,529 INFO L495 AbstractCegarLoop]: Abstraction has 549 states and 633 transitions. [2022-11-25 23:59:55,529 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:55,529 INFO L276 IsEmpty]: Start isEmpty. Operand 549 states and 633 transitions. [2022-11-25 23:59:55,530 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-25 23:59:55,531 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:59:55,531 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:59:55,541 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-11-25 23:59:55,737 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable48,38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:59:55,737 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-25 23:59:55,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:59:55,737 INFO L85 PathProgramCache]: Analyzing trace with hash -1649629830, now seen corresponding path program 11 times [2022-11-25 23:59:55,738 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:59:55,738 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [808941609] [2022-11-25 23:59:55,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:59:55,738 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:59:55,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:59:57,298 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 64 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:59:57,298 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:59:57,299 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [808941609] [2022-11-25 23:59:57,299 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [808941609] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:59:57,299 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1789553017] [2022-11-25 23:59:57,299 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:59:57,299 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:59:57,299 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:59:57,300 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:59:57,302 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-11-25 23:59:57,691 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-11-25 23:59:57,691 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:59:57,695 INFO L263 TraceCheckSpWp]: Trace formula consists of 336 conjuncts, 122 conjunts are in the unsatisfiable core [2022-11-25 23:59:57,697 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:59:58,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:00:01,498 INFO L321 Elim1Store]: treesize reduction 43, result has 48.2 percent of original size [2022-11-26 00:00:01,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 11 select indices, 11 select index equivalence classes, 45 disjoint index pairs (out of 55 index pairs), introduced 11 new quantified variables, introduced 10 case distinctions, treesize of input 89 treesize of output 82 [2022-11-26 00:00:01,500 WARN L718 sPolynomialRelations]: Constructing 512(two to the power of 9 dual juncts. [2022-11-26 00:00:01,605 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 10 proven. 190 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:00:01,605 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:00:04,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 149 treesize of output 129 [2022-11-26 00:00:04,922 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 10 select indices, 10 select index equivalence classes, 45 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 0 case distinctions, treesize of input 149 treesize of output 111 [2022-11-26 00:00:05,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-26 00:00:08,839 WARN L718 sPolynomialRelations]: Constructing 1024(two to the power of 10 dual juncts. [2022-11-26 00:00:08,855 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 0 proven. 200 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:00:08,856 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1789553017] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:00:08,856 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2125208824] [2022-11-26 00:00:08,857 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-26 00:00:08,857 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:00:08,857 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:00:08,857 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:00:08,857 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:00:08,888 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:00:08,891 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:00:08,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:00:08,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:00:08,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:09,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:09,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:09,121 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-26 00:00:09,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-26 00:00:09,196 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:00:12,284 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '30129#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:00:12,284 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:00:12,284 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:00:12,284 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 36, 36] total 96 [2022-11-26 00:00:12,284 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1591050758] [2022-11-26 00:00:12,285 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:00:12,285 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 96 states [2022-11-26 00:00:12,285 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:00:12,286 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 96 interpolants. [2022-11-26 00:00:12,286 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=958, Invalid=9962, Unknown=0, NotChecked=0, Total=10920 [2022-11-26 00:00:12,287 INFO L87 Difference]: Start difference. First operand 549 states and 633 transitions. Second operand has 96 states, 96 states have (on average 1.4479166666666667) internal successors, (139), 96 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:22,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:01:22,108 INFO L93 Difference]: Finished difference Result 1723 states and 1865 transitions. [2022-11-26 00:01:22,108 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 137 states. [2022-11-26 00:01:22,108 INFO L78 Accepts]: Start accepts. Automaton has has 96 states, 96 states have (on average 1.4479166666666667) internal successors, (139), 96 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-26 00:01:22,109 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:01:22,113 INFO L225 Difference]: With dead ends: 1723 [2022-11-26 00:01:22,113 INFO L226 Difference]: Without dead ends: 1701 [2022-11-26 00:01:22,117 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 300 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 238 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13864 ImplicationChecksByTransitivity, 75.0s TimeCoverageRelationStatistics Valid=7103, Invalid=50257, Unknown=0, NotChecked=0, Total=57360 [2022-11-26 00:01:22,118 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 4916 mSDsluCounter, 652 mSDsCounter, 0 mSdLazyCounter, 6477 mSolverCounterSat, 188 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4916 SdHoareTripleChecker+Valid, 669 SdHoareTripleChecker+Invalid, 6665 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 188 IncrementalHoareTripleChecker+Valid, 6477 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.9s IncrementalHoareTripleChecker+Time [2022-11-26 00:01:22,118 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4916 Valid, 669 Invalid, 6665 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [188 Valid, 6477 Invalid, 0 Unknown, 0 Unchecked, 6.9s Time] [2022-11-26 00:01:22,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1701 states. [2022-11-26 00:01:22,133 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1701 to 655. [2022-11-26 00:01:22,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 655 states, 652 states have (on average 1.1702453987730062) internal successors, (763), 654 states have internal predecessors, (763), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:22,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 655 states to 655 states and 763 transitions. [2022-11-26 00:01:22,135 INFO L78 Accepts]: Start accepts. Automaton has 655 states and 763 transitions. Word has length 47 [2022-11-26 00:01:22,136 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:01:22,136 INFO L495 AbstractCegarLoop]: Abstraction has 655 states and 763 transitions. [2022-11-26 00:01:22,136 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 96 states, 96 states have (on average 1.4479166666666667) internal successors, (139), 96 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:22,136 INFO L276 IsEmpty]: Start isEmpty. Operand 655 states and 763 transitions. [2022-11-26 00:01:22,137 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-26 00:01:22,138 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:01:22,138 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:01:22,146 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Ended with exit code 0 [2022-11-26 00:01:22,344 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-26 00:01:22,345 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-26 00:01:22,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:01:22,345 INFO L85 PathProgramCache]: Analyzing trace with hash 2079666015, now seen corresponding path program 11 times [2022-11-26 00:01:22,345 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:01:22,346 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1290855576] [2022-11-26 00:01:22,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:01:22,346 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:01:22,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:01:24,554 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 17 proven. 74 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:01:24,554 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:01:24,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1290855576] [2022-11-26 00:01:24,554 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1290855576] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:01:24,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [26270584] [2022-11-26 00:01:24,554 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:01:24,555 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:01:24,555 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:01:24,555 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:01:24,558 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-11-26 00:01:25,323 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-26 00:01:25,324 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:01:25,331 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 139 conjunts are in the unsatisfiable core [2022-11-26 00:01:25,335 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:01:25,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:01:26,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:26,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:01:26,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:01:26,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:01:27,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:01:27,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:01:27,472 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:01:27,474 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:01:27,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-26 00:01:27,479 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 19 proven. 72 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:01:27,479 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:01:27,492 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1755 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1755) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-26 00:01:31,784 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1755 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1755) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-26 00:01:38,196 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1755 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1755) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-26 00:01:44,772 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1755 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1755) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-26 00:01:44,860 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:01:44,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 00:01:44,867 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:01:44,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 00:01:44,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:01:45,974 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 26 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 24 not checked. [2022-11-26 00:01:45,975 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [26270584] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:01:45,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1705055332] [2022-11-26 00:01:45,976 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-26 00:01:45,976 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:01:45,976 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:01:45,976 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:01:45,977 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:01:46,013 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:01:46,015 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:01:46,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:01:46,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:01:46,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:46,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:01:46,172 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:01:46,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-11-26 00:01:46,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:46,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:46,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:46,370 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-26 00:01:46,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-26 00:01:46,465 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:01:46,529 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-26 00:01:46,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-26 00:01:46,668 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:01:46,669 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:01:46,777 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:01:46,777 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:01:46,827 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:01:51,034 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '33145#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:01:51,035 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:01:51,035 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:01:51,035 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 26, 26] total 77 [2022-11-26 00:01:51,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1295268154] [2022-11-26 00:01:51,035 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:01:51,035 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 77 states [2022-11-26 00:01:51,036 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:01:51,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 77 interpolants. [2022-11-26 00:01:51,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=455, Invalid=6996, Unknown=47, NotChecked=692, Total=8190 [2022-11-26 00:01:51,037 INFO L87 Difference]: Start difference. First operand 655 states and 763 transitions. Second operand has 77 states, 77 states have (on average 1.7012987012987013) internal successors, (131), 77 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:57,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:01:57,013 INFO L93 Difference]: Finished difference Result 747 states and 847 transitions. [2022-11-26 00:01:57,014 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-26 00:01:57,014 INFO L78 Accepts]: Start accepts. Automaton has has 77 states, 77 states have (on average 1.7012987012987013) internal successors, (131), 77 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 48 [2022-11-26 00:01:57,014 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:01:57,017 INFO L225 Difference]: With dead ends: 747 [2022-11-26 00:01:57,017 INFO L226 Difference]: Without dead ends: 707 [2022-11-26 00:01:57,018 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 223 GetRequests, 87 SyntacticMatches, 3 SemanticMatches, 133 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 5159 ImplicationChecksByTransitivity, 28.9s TimeCoverageRelationStatistics Valid=1941, Invalid=15053, Unknown=52, NotChecked=1044, Total=18090 [2022-11-26 00:01:57,019 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 600 mSDsluCounter, 386 mSDsCounter, 0 mSdLazyCounter, 1921 mSolverCounterSat, 30 mSolverCounterUnsat, 48 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 600 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 2412 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 1921 IncrementalHoareTripleChecker+Invalid, 48 IncrementalHoareTripleChecker+Unknown, 413 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-26 00:01:57,019 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [600 Valid, 401 Invalid, 2412 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 1921 Invalid, 48 Unknown, 413 Unchecked, 1.9s Time] [2022-11-26 00:01:57,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 707 states. [2022-11-26 00:01:57,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 707 to 659. [2022-11-26 00:01:57,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 659 states, 656 states have (on average 1.166158536585366) internal successors, (765), 658 states have internal predecessors, (765), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:57,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 659 states to 659 states and 765 transitions. [2022-11-26 00:01:57,028 INFO L78 Accepts]: Start accepts. Automaton has 659 states and 765 transitions. Word has length 48 [2022-11-26 00:01:57,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:01:57,028 INFO L495 AbstractCegarLoop]: Abstraction has 659 states and 765 transitions. [2022-11-26 00:01:57,028 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 77 states, 77 states have (on average 1.7012987012987013) internal successors, (131), 77 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:57,028 INFO L276 IsEmpty]: Start isEmpty. Operand 659 states and 765 transitions. [2022-11-26 00:01:57,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-26 00:01:57,030 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:01:57,030 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 4, 4, 4, 4, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:01:57,042 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Forceful destruction successful, exit code 0 [2022-11-26 00:01:57,237 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:01:57,237 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-26 00:01:57,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:01:57,238 INFO L85 PathProgramCache]: Analyzing trace with hash -1133928103, now seen corresponding path program 9 times [2022-11-26 00:01:57,238 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:01:57,238 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1765915434] [2022-11-26 00:01:57,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:01:57,238 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:01:57,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:01:57,767 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 8 proven. 37 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-11-26 00:01:57,767 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:01:57,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1765915434] [2022-11-26 00:01:57,767 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1765915434] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:01:57,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [649926926] [2022-11-26 00:01:57,768 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:01:57,768 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:01:57,768 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:01:57,769 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:01:57,771 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-11-26 00:01:58,272 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:01:58,272 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:01:58,275 INFO L263 TraceCheckSpWp]: Trace formula consists of 389 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-26 00:01:58,276 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:01:58,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:58,759 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:01:58,761 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:01:58,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-26 00:01:58,774 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 13 proven. 32 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-11-26 00:01:58,774 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:01:58,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-26 00:01:58,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-26 00:01:59,336 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 20 proven. 25 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-11-26 00:01:59,336 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [649926926] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:01:59,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1406760268] [2022-11-26 00:01:59,338 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-26 00:01:59,338 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:01:59,338 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:01:59,338 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:01:59,338 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:01:59,372 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:01:59,375 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:01:59,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:01:59,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:01:59,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:59,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:59,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-26 00:01:59,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:59,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:59,720 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-26 00:01:59,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-26 00:01:59,905 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-26 00:01:59,906 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-26 00:02:00,650 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-26 00:02:00,651 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-26 00:02:00,726 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:02:00,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:02:00,820 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:02:00,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:02:00,870 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:02:04,918 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '34986#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:02:04,919 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:02:04,919 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:02:04,919 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 41 [2022-11-26 00:02:04,919 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1347829729] [2022-11-26 00:02:04,919 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:02:04,919 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-11-26 00:02:04,919 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:02:04,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-11-26 00:02:04,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=352, Invalid=2618, Unknown=0, NotChecked=0, Total=2970 [2022-11-26 00:02:04,926 INFO L87 Difference]: Start difference. First operand 659 states and 765 transitions. Second operand has 41 states, 41 states have (on average 1.975609756097561) internal successors, (81), 41 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:06,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:02:06,592 INFO L93 Difference]: Finished difference Result 683 states and 782 transitions. [2022-11-26 00:02:06,593 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-26 00:02:06,593 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 41 states have (on average 1.975609756097561) internal successors, (81), 41 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-26 00:02:06,593 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:02:06,596 INFO L225 Difference]: With dead ends: 683 [2022-11-26 00:02:06,596 INFO L226 Difference]: Without dead ends: 679 [2022-11-26 00:02:06,597 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1716 ImplicationChecksByTransitivity, 6.3s TimeCoverageRelationStatistics Valid=901, Invalid=4951, Unknown=0, NotChecked=0, Total=5852 [2022-11-26 00:02:06,597 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 291 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 448 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 291 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 452 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 448 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-26 00:02:06,598 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [291 Valid, 205 Invalid, 452 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 448 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-26 00:02:06,598 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 679 states. [2022-11-26 00:02:06,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 679 to 647. [2022-11-26 00:02:06,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 647 states, 644 states have (on average 1.1677018633540373) internal successors, (752), 646 states have internal predecessors, (752), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:06,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 647 states to 647 states and 752 transitions. [2022-11-26 00:02:06,607 INFO L78 Accepts]: Start accepts. Automaton has 647 states and 752 transitions. Word has length 49 [2022-11-26 00:02:06,607 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:02:06,607 INFO L495 AbstractCegarLoop]: Abstraction has 647 states and 752 transitions. [2022-11-26 00:02:06,608 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 41 states have (on average 1.975609756097561) internal successors, (81), 41 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:06,608 INFO L276 IsEmpty]: Start isEmpty. Operand 647 states and 752 transitions. [2022-11-26 00:02:06,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-26 00:02:06,609 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:02:06,609 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:02:06,622 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Ended with exit code 0 [2022-11-26 00:02:06,816 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable51,41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:02:06,816 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-26 00:02:06,816 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:02:06,817 INFO L85 PathProgramCache]: Analyzing trace with hash 1500717565, now seen corresponding path program 10 times [2022-11-26 00:02:06,817 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:02:06,817 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1119294636] [2022-11-26 00:02:06,817 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:02:06,817 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:02:06,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:02:08,568 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 14 proven. 49 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-26 00:02:08,568 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:02:08,568 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1119294636] [2022-11-26 00:02:08,568 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1119294636] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:02:08,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [785583826] [2022-11-26 00:02:08,569 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:02:08,569 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:02:08,569 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:02:08,570 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:02:08,573 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-11-26 00:02:08,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:02:08,802 INFO L263 TraceCheckSpWp]: Trace formula consists of 380 conjuncts, 54 conjunts are in the unsatisfiable core [2022-11-26 00:02:08,804 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:02:09,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:02:10,013 INFO L321 Elim1Store]: treesize reduction 13, result has 48.0 percent of original size [2022-11-26 00:02:10,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 33 treesize of output 26 [2022-11-26 00:02:10,017 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-26 00:02:10,017 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:02:10,213 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-26 00:02:10,216 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 34 [2022-11-26 00:02:11,170 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 27 proven. 36 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-26 00:02:11,170 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [785583826] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:02:11,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1364768071] [2022-11-26 00:02:11,172 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-26 00:02:11,172 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:02:11,172 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:02:11,172 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:02:11,172 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:02:11,225 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:02:11,227 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:02:11,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:02:11,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:11,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:11,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:02:11,406 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:02:11,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-11-26 00:02:11,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:11,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:11,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:11,601 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-26 00:02:11,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-26 00:02:11,785 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-26 00:02:11,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-26 00:02:11,902 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:02:11,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:02:12,007 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:02:12,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:02:12,055 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:02:15,447 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '36717#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:02:15,447 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:02:15,447 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:02:15,447 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 20, 20] total 55 [2022-11-26 00:02:15,448 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [748466182] [2022-11-26 00:02:15,448 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:02:15,448 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-11-26 00:02:15,448 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:02:15,449 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-11-26 00:02:15,449 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=404, Invalid=4288, Unknown=0, NotChecked=0, Total=4692 [2022-11-26 00:02:15,449 INFO L87 Difference]: Start difference. First operand 647 states and 752 transitions. Second operand has 55 states, 55 states have (on average 1.709090909090909) internal successors, (94), 55 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:19,091 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:02:19,091 INFO L93 Difference]: Finished difference Result 742 states and 842 transitions. [2022-11-26 00:02:19,092 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-26 00:02:19,092 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 55 states have (on average 1.709090909090909) internal successors, (94), 55 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-26 00:02:19,092 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:02:19,094 INFO L225 Difference]: With dead ends: 742 [2022-11-26 00:02:19,095 INFO L226 Difference]: Without dead ends: 734 [2022-11-26 00:02:19,095 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 98 SyntacticMatches, 1 SemanticMatches, 94 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2708 ImplicationChecksByTransitivity, 8.3s TimeCoverageRelationStatistics Valid=1058, Invalid=8062, Unknown=0, NotChecked=0, Total=9120 [2022-11-26 00:02:19,096 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 454 mSDsluCounter, 456 mSDsCounter, 0 mSdLazyCounter, 1154 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 454 SdHoareTripleChecker+Valid, 484 SdHoareTripleChecker+Invalid, 1168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 1154 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-26 00:02:19,096 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [454 Valid, 484 Invalid, 1168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 1154 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-26 00:02:19,097 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 734 states. [2022-11-26 00:02:19,104 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 734 to 635. [2022-11-26 00:02:19,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 635 states, 632 states have (on average 1.1661392405063291) internal successors, (737), 634 states have internal predecessors, (737), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:19,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 635 states to 635 states and 737 transitions. [2022-11-26 00:02:19,106 INFO L78 Accepts]: Start accepts. Automaton has 635 states and 737 transitions. Word has length 49 [2022-11-26 00:02:19,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:02:19,106 INFO L495 AbstractCegarLoop]: Abstraction has 635 states and 737 transitions. [2022-11-26 00:02:19,106 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 55 states, 55 states have (on average 1.709090909090909) internal successors, (94), 55 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:19,106 INFO L276 IsEmpty]: Start isEmpty. Operand 635 states and 737 transitions. [2022-11-26 00:02:19,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-26 00:02:19,108 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:02:19,108 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:02:19,114 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Ended with exit code 0 [2022-11-26 00:02:19,314 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable52,42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:02:19,314 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-26 00:02:19,314 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:02:19,315 INFO L85 PathProgramCache]: Analyzing trace with hash -571957022, now seen corresponding path program 12 times [2022-11-26 00:02:19,315 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:02:19,315 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [146154872] [2022-11-26 00:02:19,315 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:02:19,315 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:02:19,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:02:21,007 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 10 proven. 91 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-26 00:02:21,008 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:02:21,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [146154872] [2022-11-26 00:02:21,008 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [146154872] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:02:21,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [766425749] [2022-11-26 00:02:21,008 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:02:21,009 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:02:21,009 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:02:21,010 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:02:21,012 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-11-26 00:02:21,519 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:02:21,519 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:02:21,524 INFO L263 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 97 conjunts are in the unsatisfiable core [2022-11-26 00:02:21,526 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:02:21,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:02:21,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:22,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 00:02:22,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 00:02:22,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:02:22,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:02:22,440 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-26 00:02:22,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 00:02:22,454 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 10 proven. 56 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-26 00:02:22,454 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:02:22,467 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1982 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1982) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-26 00:02:36,250 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1982 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1982) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-26 00:02:40,405 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1982 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1982) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-26 00:02:40,416 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1982 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1982) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-26 00:02:40,422 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:02:40,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 00:02:40,428 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:02:40,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 00:02:40,743 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 10 proven. 37 refuted. 0 times theorem prover too weak. 36 trivial. 19 not checked. [2022-11-26 00:02:40,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [766425749] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:02:40,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [855824214] [2022-11-26 00:02:40,747 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-26 00:02:40,747 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:02:40,748 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:02:40,748 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:02:40,748 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:02:40,784 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:02:40,786 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:02:40,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:02:40,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:02:40,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:40,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:40,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-26 00:02:40,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:40,987 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:41,095 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-26 00:02:41,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-26 00:02:41,257 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-26 00:02:41,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-26 00:02:42,074 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:02:42,080 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:02:42,203 INFO L321 Elim1Store]: treesize reduction 201, result has 26.9 percent of original size [2022-11-26 00:02:42,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1015 treesize of output 1041 [2022-11-26 00:02:43,463 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:02:43,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:02:43,571 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:02:43,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:02:43,658 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:02:48,612 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '38509#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:02:48,612 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:02:48,613 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:02:48,613 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 21, 21] total 53 [2022-11-26 00:02:48,613 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [26893965] [2022-11-26 00:02:48,613 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:02:48,613 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-11-26 00:02:48,613 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:02:48,614 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-11-26 00:02:48,614 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=242, Invalid=3618, Unknown=62, NotChecked=500, Total=4422 [2022-11-26 00:02:48,614 INFO L87 Difference]: Start difference. First operand 635 states and 737 transitions. Second operand has 53 states, 53 states have (on average 1.8867924528301887) internal successors, (100), 53 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:52,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:02:52,273 INFO L93 Difference]: Finished difference Result 912 states and 1054 transitions. [2022-11-26 00:02:52,274 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-26 00:02:52,274 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 53 states have (on average 1.8867924528301887) internal successors, (100), 53 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-26 00:02:52,274 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:02:52,276 INFO L225 Difference]: With dead ends: 912 [2022-11-26 00:02:52,277 INFO L226 Difference]: Without dead ends: 844 [2022-11-26 00:02:52,277 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 203 GetRequests, 110 SyntacticMatches, 5 SemanticMatches, 88 ConstructedPredicates, 4 IntricatePredicates, 1 DeprecatedPredicates, 1620 ImplicationChecksByTransitivity, 26.4s TimeCoverageRelationStatistics Valid=486, Invalid=6778, Unknown=62, NotChecked=684, Total=8010 [2022-11-26 00:02:52,278 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 220 mSDsluCounter, 761 mSDsCounter, 0 mSdLazyCounter, 2062 mSolverCounterSat, 14 mSolverCounterUnsat, 11 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 220 SdHoareTripleChecker+Valid, 803 SdHoareTripleChecker+Invalid, 2518 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 2062 IncrementalHoareTripleChecker+Invalid, 11 IncrementalHoareTripleChecker+Unknown, 431 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-26 00:02:52,278 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [220 Valid, 803 Invalid, 2518 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 2062 Invalid, 11 Unknown, 431 Unchecked, 1.7s Time] [2022-11-26 00:02:52,279 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 844 states. [2022-11-26 00:02:52,287 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 844 to 774. [2022-11-26 00:02:52,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 774 states, 771 states have (on average 1.1776913099870299) internal successors, (908), 773 states have internal predecessors, (908), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:52,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 774 states to 774 states and 908 transitions. [2022-11-26 00:02:52,289 INFO L78 Accepts]: Start accepts. Automaton has 774 states and 908 transitions. Word has length 50 [2022-11-26 00:02:52,290 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:02:52,290 INFO L495 AbstractCegarLoop]: Abstraction has 774 states and 908 transitions. [2022-11-26 00:02:52,290 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 53 states have (on average 1.8867924528301887) internal successors, (100), 53 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:52,290 INFO L276 IsEmpty]: Start isEmpty. Operand 774 states and 908 transitions. [2022-11-26 00:02:52,291 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-26 00:02:52,292 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:02:52,292 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:02:52,302 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Forceful destruction successful, exit code 0 [2022-11-26 00:02:52,499 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable53 [2022-11-26 00:02:52,499 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-26 00:02:52,499 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:02:52,499 INFO L85 PathProgramCache]: Analyzing trace with hash -346173862, now seen corresponding path program 11 times [2022-11-26 00:02:52,500 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:02:52,500 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [86073522] [2022-11-26 00:02:52,500 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:02:52,500 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:02:52,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:02:53,560 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 25 proven. 65 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-26 00:02:53,561 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:02:53,561 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [86073522] [2022-11-26 00:02:53,561 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [86073522] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:02:53,561 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [754693877] [2022-11-26 00:02:53,561 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:02:53,561 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:02:53,561 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:02:53,562 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:02:53,565 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-11-26 00:02:54,083 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-26 00:02:54,083 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:02:54,087 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 89 conjunts are in the unsatisfiable core [2022-11-26 00:02:54,089 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:02:54,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:02:55,181 INFO L321 Elim1Store]: treesize reduction 12, result has 79.7 percent of original size [2022-11-26 00:02:55,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 3 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 7 case distinctions, treesize of input 41 treesize of output 65 [2022-11-26 00:02:55,857 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 7 proven. 50 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2022-11-26 00:02:55,857 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:02:57,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 57 treesize of output 49 [2022-11-26 00:02:57,428 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:02:57,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 81 [2022-11-26 00:02:57,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 35 [2022-11-26 00:02:59,110 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 9 proven. 48 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2022-11-26 00:02:59,111 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [754693877] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:02:59,111 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [715516273] [2022-11-26 00:02:59,112 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-26 00:02:59,112 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:02:59,112 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:02:59,112 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:02:59,112 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:02:59,147 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:02:59,149 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:02:59,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:02:59,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:02:59,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:59,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:02:59,352 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:02:59,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-11-26 00:02:59,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:59,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:59,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:59,544 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-26 00:02:59,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-26 00:02:59,689 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-26 00:02:59,690 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-26 00:02:59,776 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:02:59,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:02:59,897 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:02:59,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:02:59,988 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:03:04,843 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '40619#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:03:04,843 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:03:04,843 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:03:04,843 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 21, 21] total 61 [2022-11-26 00:03:04,843 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [516385213] [2022-11-26 00:03:04,843 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:03:04,844 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-26 00:03:04,844 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:03:04,845 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-26 00:03:04,845 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=396, Invalid=5304, Unknown=0, NotChecked=0, Total=5700 [2022-11-26 00:03:04,845 INFO L87 Difference]: Start difference. First operand 774 states and 908 transitions. Second operand has 62 states, 61 states have (on average 2.0491803278688523) internal successors, (125), 62 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:03:35,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:03:35,077 INFO L93 Difference]: Finished difference Result 1076 states and 1213 transitions. [2022-11-26 00:03:35,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 172 states. [2022-11-26 00:03:35,078 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 61 states have (on average 2.0491803278688523) internal successors, (125), 62 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-26 00:03:35,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:03:35,079 INFO L225 Difference]: With dead ends: 1076 [2022-11-26 00:03:35,079 INFO L226 Difference]: Without dead ends: 987 [2022-11-26 00:03:35,081 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 98 SyntacticMatches, 0 SemanticMatches, 244 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17382 ImplicationChecksByTransitivity, 34.7s TimeCoverageRelationStatistics Valid=6389, Invalid=53881, Unknown=0, NotChecked=0, Total=60270 [2022-11-26 00:03:35,081 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 2027 mSDsluCounter, 276 mSDsCounter, 0 mSdLazyCounter, 4630 mSolverCounterSat, 160 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2027 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 4790 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 160 IncrementalHoareTripleChecker+Valid, 4630 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.0s IncrementalHoareTripleChecker+Time [2022-11-26 00:03:35,082 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2027 Valid, 292 Invalid, 4790 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [160 Valid, 4630 Invalid, 0 Unknown, 0 Unchecked, 4.0s Time] [2022-11-26 00:03:35,082 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 987 states. [2022-11-26 00:03:35,087 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 987 to 768. [2022-11-26 00:03:35,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 768 states, 765 states have (on average 1.1516339869281045) internal successors, (881), 767 states have internal predecessors, (881), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:03:35,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 768 states to 768 states and 881 transitions. [2022-11-26 00:03:35,089 INFO L78 Accepts]: Start accepts. Automaton has 768 states and 881 transitions. Word has length 51 [2022-11-26 00:03:35,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:03:35,089 INFO L495 AbstractCegarLoop]: Abstraction has 768 states and 881 transitions. [2022-11-26 00:03:35,089 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 61 states have (on average 2.0491803278688523) internal successors, (125), 62 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:03:35,089 INFO L276 IsEmpty]: Start isEmpty. Operand 768 states and 881 transitions. [2022-11-26 00:03:35,090 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-26 00:03:35,091 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:03:35,091 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:03:35,097 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Forceful destruction successful, exit code 0 [2022-11-26 00:03:35,297 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable54 [2022-11-26 00:03:35,297 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-26 00:03:35,298 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:03:35,298 INFO L85 PathProgramCache]: Analyzing trace with hash 613890594, now seen corresponding path program 12 times [2022-11-26 00:03:35,298 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:03:35,298 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [304106988] [2022-11-26 00:03:35,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:03:35,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:03:35,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:03:36,232 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 49 proven. 107 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-26 00:03:36,232 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:03:36,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [304106988] [2022-11-26 00:03:36,232 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [304106988] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:03:36,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2045720423] [2022-11-26 00:03:36,232 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:03:36,232 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:03:36,232 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:03:36,233 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:03:36,238 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-11-26 00:03:36,523 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:03:36,523 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:03:36,527 INFO L263 TraceCheckSpWp]: Trace formula consists of 375 conjuncts, 93 conjunts are in the unsatisfiable core [2022-11-26 00:03:36,529 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:03:37,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:03:38,628 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,629 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,629 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,630 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,637 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,638 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,639 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,640 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,640 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,641 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,642 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,643 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,644 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,645 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,645 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,646 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:38,691 INFO L321 Elim1Store]: treesize reduction 35, result has 52.1 percent of original size [2022-11-26 00:03:38,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 81 treesize of output 72 [2022-11-26 00:03:38,693 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-26 00:03:38,752 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 16 proven. 138 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-26 00:03:38,753 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:03:40,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 103 [2022-11-26 00:03:40,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 28 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 89 [2022-11-26 00:03:42,783 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-26 00:03:42,786 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 73 proven. 81 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-26 00:03:42,786 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2045720423] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:03:42,786 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [426864117] [2022-11-26 00:03:42,787 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-26 00:03:42,787 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:03:42,787 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:03:42,788 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:03:42,788 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:03:42,840 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:42,845 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:03:42,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:03:42,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:03:42,919 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:03:42,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:03:43,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-26 00:03:43,048 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:03:43,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:03:43,162 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-26 00:03:43,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-26 00:03:43,322 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-26 00:03:43,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-26 00:03:43,898 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-26 00:03:43,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-26 00:03:43,990 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:03:43,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:03:44,090 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:03:44,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:03:44,139 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:03:49,357 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '43201#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:03:49,358 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:03:49,358 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:03:49,358 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 31, 31] total 84 [2022-11-26 00:03:49,358 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1226178695] [2022-11-26 00:03:49,358 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:03:49,359 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 84 states [2022-11-26 00:03:49,359 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:03:49,360 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 84 interpolants. [2022-11-26 00:03:49,360 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=621, Invalid=8885, Unknown=0, NotChecked=0, Total=9506 [2022-11-26 00:03:49,361 INFO L87 Difference]: Start difference. First operand 768 states and 881 transitions. Second operand has 84 states, 84 states have (on average 1.6666666666666667) internal successors, (140), 84 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:04:33,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:04:33,058 INFO L93 Difference]: Finished difference Result 1482 states and 1596 transitions. [2022-11-26 00:04:33,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 150 states. [2022-11-26 00:04:33,059 INFO L78 Accepts]: Start accepts. Automaton has has 84 states, 84 states have (on average 1.6666666666666667) internal successors, (140), 84 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-26 00:04:33,059 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:04:33,063 INFO L225 Difference]: With dead ends: 1482 [2022-11-26 00:04:33,063 INFO L226 Difference]: Without dead ends: 1390 [2022-11-26 00:04:33,065 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 324 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 244 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15377 ImplicationChecksByTransitivity, 49.0s TimeCoverageRelationStatistics Valid=7483, Invalid=52787, Unknown=0, NotChecked=0, Total=60270 [2022-11-26 00:04:33,065 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 1744 mSDsluCounter, 460 mSDsCounter, 0 mSdLazyCounter, 6026 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1744 SdHoareTripleChecker+Valid, 478 SdHoareTripleChecker+Invalid, 6107 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 6026 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.9s IncrementalHoareTripleChecker+Time [2022-11-26 00:04:33,065 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1744 Valid, 478 Invalid, 6107 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 6026 Invalid, 0 Unknown, 0 Unchecked, 4.9s Time] [2022-11-26 00:04:33,066 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1390 states. [2022-11-26 00:04:33,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1390 to 805. [2022-11-26 00:04:33,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 805 states, 802 states have (on average 1.1359102244389028) internal successors, (911), 804 states have internal predecessors, (911), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:04:33,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 805 states to 805 states and 911 transitions. [2022-11-26 00:04:33,074 INFO L78 Accepts]: Start accepts. Automaton has 805 states and 911 transitions. Word has length 51 [2022-11-26 00:04:33,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:04:33,074 INFO L495 AbstractCegarLoop]: Abstraction has 805 states and 911 transitions. [2022-11-26 00:04:33,074 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 84 states, 84 states have (on average 1.6666666666666667) internal successors, (140), 84 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:04:33,074 INFO L276 IsEmpty]: Start isEmpty. Operand 805 states and 911 transitions. [2022-11-26 00:04:33,075 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-26 00:04:33,076 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:04:33,076 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 11, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:04:33,091 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Forceful destruction successful, exit code 0 [2022-11-26 00:04:33,282 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable55,45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:04:33,282 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-26 00:04:33,282 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:04:33,282 INFO L85 PathProgramCache]: Analyzing trace with hash 1192453680, now seen corresponding path program 12 times [2022-11-26 00:04:33,283 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:04:33,283 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1525276982] [2022-11-26 00:04:33,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:04:33,283 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:04:33,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:04:34,541 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 81 proven. 161 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:04:34,542 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:04:34,542 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1525276982] [2022-11-26 00:04:34,542 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1525276982] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:04:34,542 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [109601597] [2022-11-26 00:04:34,542 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:04:34,542 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:04:34,542 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:04:34,543 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:04:34,546 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b36eede-e524-4a01-8daf-e5be69fb6eac/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-11-26 00:04:34,782 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:04:34,782 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:04:34,786 INFO L263 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 111 conjunts are in the unsatisfiable core [2022-11-26 00:04:34,788 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:04:35,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:04:38,420 INFO L321 Elim1Store]: treesize reduction 45, result has 49.4 percent of original size [2022-11-26 00:04:38,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 12 select indices, 12 select index equivalence classes, 55 disjoint index pairs (out of 66 index pairs), introduced 12 new quantified variables, introduced 66 case distinctions, treesize of input 97 treesize of output 90 [2022-11-26 00:04:38,423 WARN L718 sPolynomialRelations]: Constructing 1024(two to the power of 10 dual juncts. [2022-11-26 00:04:38,510 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 11 proven. 231 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:04:38,510 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:04:41,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 164 treesize of output 142 [2022-11-26 00:04:41,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 11 select indices, 11 select index equivalence classes, 55 disjoint index pairs (out of 55 index pairs), introduced 11 new quantified variables, introduced 0 case distinctions, treesize of input 164 treesize of output 122 [2022-11-26 00:04:45,268 WARN L718 sPolynomialRelations]: Constructing 2048(two to the power of 11 dual juncts. [2022-11-26 00:04:45,300 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 121 proven. 121 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:04:45,300 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [109601597] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:04:45,300 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [281488350] [2022-11-26 00:04:45,301 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-26 00:04:45,301 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:04:45,302 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:04:45,302 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:04:45,302 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:04:45,361 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:04:45,363 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:04:45,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:04:45,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:04:45,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:04:45,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:04:45,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:04:45,586 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-26 00:04:45,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-26 00:04:45,660 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:04:48,375 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '46200#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:04:48,375 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:04:48,375 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:04:48,375 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 39, 39] total 102 [2022-11-26 00:04:48,376 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1228098999] [2022-11-26 00:04:48,376 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:04:48,376 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 102 states [2022-11-26 00:04:48,376 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:04:48,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 102 interpolants. [2022-11-26 00:04:48,377 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=877, Invalid=11333, Unknown=0, NotChecked=0, Total=12210 [2022-11-26 00:04:48,377 INFO L87 Difference]: Start difference. First operand 805 states and 911 transitions. Second operand has 102 states, 102 states have (on average 1.4607843137254901) internal successors, (149), 102 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)