./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d8697c629a22dee8b5a51c26261db89d3e1115a5e0c1bc03fd54c09ffc3b9b0d --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 22:18:39,537 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 22:18:39,539 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 22:18:39,559 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 22:18:39,559 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 22:18:39,560 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 22:18:39,561 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 22:18:39,563 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 22:18:39,564 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 22:18:39,565 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 22:18:39,566 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 22:18:39,567 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 22:18:39,568 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 22:18:39,568 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 22:18:39,570 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 22:18:39,571 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 22:18:39,571 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 22:18:39,572 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 22:18:39,574 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 22:18:39,576 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 22:18:39,577 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 22:18:39,578 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 22:18:39,580 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 22:18:39,581 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 22:18:39,587 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 22:18:39,593 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 22:18:39,593 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 22:18:39,594 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 22:18:39,594 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 22:18:39,595 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 22:18:39,599 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 22:18:39,600 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 22:18:39,601 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 22:18:39,602 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 22:18:39,603 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 22:18:39,605 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 22:18:39,606 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 22:18:39,606 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 22:18:39,607 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 22:18:39,608 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 22:18:39,609 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 22:18:39,610 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-25 22:18:39,645 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 22:18:39,649 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 22:18:39,650 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 22:18:39,650 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 22:18:39,651 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 22:18:39,651 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 22:18:39,651 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-25 22:18:39,652 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-25 22:18:39,652 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-25 22:18:39,652 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-25 22:18:39,653 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-25 22:18:39,653 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-25 22:18:39,653 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-25 22:18:39,654 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-25 22:18:39,654 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-25 22:18:39,654 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-25 22:18:39,654 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-25 22:18:39,654 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-25 22:18:39,655 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 22:18:39,655 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 22:18:39,655 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 22:18:39,656 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 22:18:39,656 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-25 22:18:39,656 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 22:18:39,657 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 22:18:39,657 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 22:18:39,657 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-25 22:18:39,657 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-25 22:18:39,658 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-25 22:18:39,658 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 22:18:39,658 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-25 22:18:39,658 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 22:18:39,658 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 22:18:39,659 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 22:18:39,659 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 22:18:39,659 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 22:18:39,659 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 22:18:39,659 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-25 22:18:39,660 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 22:18:39,660 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-25 22:18:39,661 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 22:18:39,661 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-25 22:18:39,661 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d8697c629a22dee8b5a51c26261db89d3e1115a5e0c1bc03fd54c09ffc3b9b0d [2022-11-25 22:18:39,993 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 22:18:40,013 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 22:18:40,015 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 22:18:40,016 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 22:18:40,017 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 22:18:40,018 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/../../sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i [2022-11-25 22:18:43,165 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 22:18:43,474 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 22:18:43,475 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i [2022-11-25 22:18:43,487 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/data/7e7ed08ad/9d765a7c78f9407c9f6e2bcff10cef83/FLAGef113a69c [2022-11-25 22:18:43,504 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/data/7e7ed08ad/9d765a7c78f9407c9f6e2bcff10cef83 [2022-11-25 22:18:43,510 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 22:18:43,512 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 22:18:43,514 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 22:18:43,514 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 22:18:43,518 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 22:18:43,519 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 10:18:43" (1/1) ... [2022-11-25 22:18:43,520 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2654efb3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:43, skipping insertion in model container [2022-11-25 22:18:43,520 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 10:18:43" (1/1) ... [2022-11-25 22:18:43,527 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 22:18:43,582 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 22:18:43,982 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 22:18:44,000 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 22:18:44,065 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 22:18:44,097 INFO L208 MainTranslator]: Completed translation [2022-11-25 22:18:44,097 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44 WrapperNode [2022-11-25 22:18:44,098 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 22:18:44,099 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 22:18:44,099 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 22:18:44,099 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 22:18:44,106 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (1/1) ... [2022-11-25 22:18:44,137 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (1/1) ... [2022-11-25 22:18:44,167 INFO L138 Inliner]: procedures = 117, calls = 18, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 107 [2022-11-25 22:18:44,167 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 22:18:44,168 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 22:18:44,168 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 22:18:44,169 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 22:18:44,177 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (1/1) ... [2022-11-25 22:18:44,178 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (1/1) ... [2022-11-25 22:18:44,182 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (1/1) ... [2022-11-25 22:18:44,193 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (1/1) ... [2022-11-25 22:18:44,204 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (1/1) ... [2022-11-25 22:18:44,212 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (1/1) ... [2022-11-25 22:18:44,214 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (1/1) ... [2022-11-25 22:18:44,215 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (1/1) ... [2022-11-25 22:18:44,217 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 22:18:44,217 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 22:18:44,218 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 22:18:44,218 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 22:18:44,218 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (1/1) ... [2022-11-25 22:18:44,230 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 22:18:44,240 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:18:44,251 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 22:18:44,255 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 22:18:44,293 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-25 22:18:44,293 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-25 22:18:44,293 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-25 22:18:44,293 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-25 22:18:44,293 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 22:18:44,294 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 22:18:44,407 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 22:18:44,409 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 22:18:44,731 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 22:18:44,791 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 22:18:44,792 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-25 22:18:44,794 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 10:18:44 BoogieIcfgContainer [2022-11-25 22:18:44,799 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 22:18:44,801 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 22:18:44,802 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 22:18:44,805 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 22:18:44,806 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 10:18:43" (1/3) ... [2022-11-25 22:18:44,807 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4feca929 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 10:18:44, skipping insertion in model container [2022-11-25 22:18:44,808 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:18:44" (2/3) ... [2022-11-25 22:18:44,809 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4feca929 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 10:18:44, skipping insertion in model container [2022-11-25 22:18:44,809 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 10:18:44" (3/3) ... [2022-11-25 22:18:44,811 INFO L112 eAbstractionObserver]: Analyzing ICFG cstrncat-alloca-2.i [2022-11-25 22:18:44,829 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 22:18:44,830 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 19 error locations. [2022-11-25 22:18:44,888 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 22:18:44,894 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@79265d42, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 22:18:44,894 INFO L358 AbstractCegarLoop]: Starting to check reachability of 19 error locations. [2022-11-25 22:18:44,898 INFO L276 IsEmpty]: Start isEmpty. Operand has 40 states, 20 states have (on average 2.4) internal successors, (48), 39 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:44,902 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-25 22:18:44,902 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:44,903 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-25 22:18:44,903 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:44,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:44,907 INFO L85 PathProgramCache]: Analyzing trace with hash 169012, now seen corresponding path program 1 times [2022-11-25 22:18:44,915 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:44,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1810837287] [2022-11-25 22:18:44,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:44,916 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:45,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:45,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:45,160 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:45,160 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1810837287] [2022-11-25 22:18:45,161 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1810837287] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:45,161 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:18:45,161 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-25 22:18:45,163 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1646185439] [2022-11-25 22:18:45,163 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:45,167 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 22:18:45,167 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:45,210 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 22:18:45,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:18:45,214 INFO L87 Difference]: Start difference. First operand has 40 states, 20 states have (on average 2.4) internal successors, (48), 39 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:45,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:45,307 INFO L93 Difference]: Finished difference Result 41 states and 47 transitions. [2022-11-25 22:18:45,308 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 22:18:45,310 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-25 22:18:45,310 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:45,319 INFO L225 Difference]: With dead ends: 41 [2022-11-25 22:18:45,319 INFO L226 Difference]: Without dead ends: 39 [2022-11-25 22:18:45,321 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:18:45,328 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 1 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 56 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:45,329 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 56 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:18:45,347 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2022-11-25 22:18:45,356 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2022-11-25 22:18:45,357 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 20 states have (on average 2.2) internal successors, (44), 38 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:45,358 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 44 transitions. [2022-11-25 22:18:45,360 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 44 transitions. Word has length 3 [2022-11-25 22:18:45,360 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:45,360 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 44 transitions. [2022-11-25 22:18:45,360 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:45,360 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 44 transitions. [2022-11-25 22:18:45,361 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-25 22:18:45,361 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:45,361 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-25 22:18:45,361 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 22:18:45,362 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:45,362 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:45,362 INFO L85 PathProgramCache]: Analyzing trace with hash 5238508, now seen corresponding path program 1 times [2022-11-25 22:18:45,363 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:45,363 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1655823678] [2022-11-25 22:18:45,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:45,363 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:45,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:45,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:45,587 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:45,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1655823678] [2022-11-25 22:18:45,587 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1655823678] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:45,587 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:18:45,588 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 22:18:45,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2040155654] [2022-11-25 22:18:45,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:45,589 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 22:18:45,589 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:45,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 22:18:45,590 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:18:45,590 INFO L87 Difference]: Start difference. First operand 39 states and 44 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:45,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:45,629 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-11-25 22:18:45,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 22:18:45,630 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-25 22:18:45,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:45,631 INFO L225 Difference]: With dead ends: 37 [2022-11-25 22:18:45,631 INFO L226 Difference]: Without dead ends: 37 [2022-11-25 22:18:45,631 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:18:45,632 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:45,633 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 20 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:18:45,634 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-25 22:18:45,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 37. [2022-11-25 22:18:45,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 20 states have (on average 2.1) internal successors, (42), 36 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:45,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 42 transitions. [2022-11-25 22:18:45,638 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 42 transitions. Word has length 4 [2022-11-25 22:18:45,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:45,638 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 42 transitions. [2022-11-25 22:18:45,639 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:45,639 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 42 transitions. [2022-11-25 22:18:45,639 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-25 22:18:45,639 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:45,639 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-25 22:18:45,640 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 22:18:45,640 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:45,640 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:45,641 INFO L85 PathProgramCache]: Analyzing trace with hash 5238509, now seen corresponding path program 1 times [2022-11-25 22:18:45,641 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:45,641 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1936876002] [2022-11-25 22:18:45,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:45,641 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:45,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:46,129 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:46,129 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:46,129 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1936876002] [2022-11-25 22:18:46,130 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1936876002] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:46,130 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:18:46,130 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 22:18:46,130 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [987903115] [2022-11-25 22:18:46,130 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:46,131 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 22:18:46,131 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:46,132 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 22:18:46,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:18:46,133 INFO L87 Difference]: Start difference. First operand 37 states and 42 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:46,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:46,395 INFO L93 Difference]: Finished difference Result 71 states and 81 transitions. [2022-11-25 22:18:46,396 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 22:18:46,396 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-25 22:18:46,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:46,399 INFO L225 Difference]: With dead ends: 71 [2022-11-25 22:18:46,400 INFO L226 Difference]: Without dead ends: 71 [2022-11-25 22:18:46,401 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 22:18:46,408 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 147 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 70 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 55 SdHoareTripleChecker+Invalid, 71 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 70 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:46,409 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [147 Valid, 55 Invalid, 71 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 70 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:18:46,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-11-25 22:18:46,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 39. [2022-11-25 22:18:46,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 22 states have (on average 2.0454545454545454) internal successors, (45), 38 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:46,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 45 transitions. [2022-11-25 22:18:46,421 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 45 transitions. Word has length 4 [2022-11-25 22:18:46,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:46,421 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 45 transitions. [2022-11-25 22:18:46,421 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:46,421 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 45 transitions. [2022-11-25 22:18:46,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 22:18:46,422 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:46,422 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-25 22:18:46,422 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 22:18:46,422 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:46,423 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:46,423 INFO L85 PathProgramCache]: Analyzing trace with hash 162495202, now seen corresponding path program 1 times [2022-11-25 22:18:46,423 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:46,423 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [12132556] [2022-11-25 22:18:46,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:46,424 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:46,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:46,496 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:46,497 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:46,497 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [12132556] [2022-11-25 22:18:46,497 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [12132556] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:46,497 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:18:46,497 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 22:18:46,498 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1472474429] [2022-11-25 22:18:46,499 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:46,499 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 22:18:46,499 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:46,500 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 22:18:46,502 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:18:46,502 INFO L87 Difference]: Start difference. First operand 39 states and 45 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:46,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:46,537 INFO L93 Difference]: Finished difference Result 37 states and 43 transitions. [2022-11-25 22:18:46,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 22:18:46,537 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 22:18:46,538 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:46,538 INFO L225 Difference]: With dead ends: 37 [2022-11-25 22:18:46,538 INFO L226 Difference]: Without dead ends: 37 [2022-11-25 22:18:46,539 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:18:46,549 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 34 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:46,550 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 20 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:18:46,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-25 22:18:46,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 37. [2022-11-25 22:18:46,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 22 states have (on average 1.9545454545454546) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:46,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-25 22:18:46,557 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 5 [2022-11-25 22:18:46,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:46,558 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-25 22:18:46,558 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:46,558 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-25 22:18:46,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 22:18:46,558 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:46,558 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-25 22:18:46,559 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 22:18:46,559 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:46,560 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:46,560 INFO L85 PathProgramCache]: Analyzing trace with hash 162495203, now seen corresponding path program 1 times [2022-11-25 22:18:46,560 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:46,560 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1632548159] [2022-11-25 22:18:46,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:46,561 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:46,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:46,643 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:46,644 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:46,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1632548159] [2022-11-25 22:18:46,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1632548159] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:46,644 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:18:46,644 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 22:18:46,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [923499570] [2022-11-25 22:18:46,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:46,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 22:18:46,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:46,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 22:18:46,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 22:18:46,646 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 4 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:46,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:46,718 INFO L93 Difference]: Finished difference Result 65 states and 74 transitions. [2022-11-25 22:18:46,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 22:18:46,718 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 22:18:46,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:46,721 INFO L225 Difference]: With dead ends: 65 [2022-11-25 22:18:46,721 INFO L226 Difference]: Without dead ends: 65 [2022-11-25 22:18:46,722 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:18:46,723 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 64 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 80 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:46,726 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 80 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:18:46,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-25 22:18:46,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 38. [2022-11-25 22:18:46,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 23 states have (on average 1.9130434782608696) internal successors, (44), 37 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:46,731 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 44 transitions. [2022-11-25 22:18:46,731 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 44 transitions. Word has length 5 [2022-11-25 22:18:46,731 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:46,731 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 44 transitions. [2022-11-25 22:18:46,731 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:46,732 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 44 transitions. [2022-11-25 22:18:46,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 22:18:46,732 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:46,732 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-25 22:18:46,732 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 22:18:46,733 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:46,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:46,733 INFO L85 PathProgramCache]: Analyzing trace with hash 162498002, now seen corresponding path program 1 times [2022-11-25 22:18:46,733 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:46,733 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [157946975] [2022-11-25 22:18:46,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:46,734 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:46,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:47,174 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:47,174 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:47,174 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [157946975] [2022-11-25 22:18:47,174 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [157946975] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:47,175 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:18:47,175 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 22:18:47,175 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1643727708] [2022-11-25 22:18:47,175 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:47,176 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 22:18:47,176 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:47,176 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 22:18:47,176 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:18:47,177 INFO L87 Difference]: Start difference. First operand 38 states and 44 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:47,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:47,384 INFO L93 Difference]: Finished difference Result 64 states and 73 transitions. [2022-11-25 22:18:47,385 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 22:18:47,385 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 22:18:47,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:47,385 INFO L225 Difference]: With dead ends: 64 [2022-11-25 22:18:47,386 INFO L226 Difference]: Without dead ends: 64 [2022-11-25 22:18:47,386 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-25 22:18:47,387 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 131 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 49 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:47,387 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [131 Valid, 32 Invalid, 49 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:18:47,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2022-11-25 22:18:47,390 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 39. [2022-11-25 22:18:47,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 24 states have (on average 1.875) internal successors, (45), 38 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:47,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 45 transitions. [2022-11-25 22:18:47,391 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 45 transitions. Word has length 5 [2022-11-25 22:18:47,391 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:47,391 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 45 transitions. [2022-11-25 22:18:47,391 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:47,391 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 45 transitions. [2022-11-25 22:18:47,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-25 22:18:47,392 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:47,392 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-25 22:18:47,392 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-25 22:18:47,393 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:47,393 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:47,393 INFO L85 PathProgramCache]: Analyzing trace with hash 739335090, now seen corresponding path program 1 times [2022-11-25 22:18:47,393 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:47,394 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [343094878] [2022-11-25 22:18:47,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:47,394 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:47,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:47,761 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:47,761 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:47,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [343094878] [2022-11-25 22:18:47,761 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [343094878] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:18:47,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [136037449] [2022-11-25 22:18:47,762 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:47,762 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:18:47,762 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:18:47,769 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:18:47,771 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 22:18:47,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:47,854 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 21 conjunts are in the unsatisfiable core [2022-11-25 22:18:47,860 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:18:48,034 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:18:48,043 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-25 22:18:48,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:18:48,226 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:48,227 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:18:48,398 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:18:48,423 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:48,423 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [136037449] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:18:48,424 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1861527118] [2022-11-25 22:18:48,443 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-25 22:18:48,443 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:18:48,447 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:18:48,452 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:18:48,453 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:18:48,546 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:18:48,550 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:18:48,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:18:48,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:18:48,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:18:48,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:18:48,797 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:18:49,245 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '665#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:18:49,245 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:18:49,245 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:18:49,245 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 4, 4] total 13 [2022-11-25 22:18:49,246 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1789048021] [2022-11-25 22:18:49,246 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:18:49,246 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-11-25 22:18:49,246 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:49,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-11-25 22:18:49,247 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=265, Unknown=0, NotChecked=0, Total=342 [2022-11-25 22:18:49,247 INFO L87 Difference]: Start difference. First operand 39 states and 45 transitions. Second operand has 15 states, 14 states have (on average 1.2857142857142858) internal successors, (18), 14 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:49,702 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:49,702 INFO L93 Difference]: Finished difference Result 94 states and 108 transitions. [2022-11-25 22:18:49,703 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 22:18:49,703 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 1.2857142857142858) internal successors, (18), 14 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-25 22:18:49,703 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:49,704 INFO L225 Difference]: With dead ends: 94 [2022-11-25 22:18:49,704 INFO L226 Difference]: Without dead ends: 94 [2022-11-25 22:18:49,704 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=126, Invalid=380, Unknown=0, NotChecked=0, Total=506 [2022-11-25 22:18:49,705 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 372 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 245 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 372 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 249 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 245 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:49,705 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [372 Valid, 188 Invalid, 249 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 245 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 22:18:49,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-25 22:18:49,708 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 37. [2022-11-25 22:18:49,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 23 states have (on average 1.8695652173913044) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:49,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-25 22:18:49,708 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 6 [2022-11-25 22:18:49,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:49,709 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-25 22:18:49,709 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 1.2857142857142858) internal successors, (18), 14 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:49,709 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-25 22:18:49,709 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-25 22:18:49,709 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:49,710 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-25 22:18:49,717 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-25 22:18:49,916 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-11-25 22:18:49,916 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:49,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:49,917 INFO L85 PathProgramCache]: Analyzing trace with hash 742470770, now seen corresponding path program 1 times [2022-11-25 22:18:49,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:49,917 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1295935850] [2022-11-25 22:18:49,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:49,917 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:49,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:50,099 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:50,100 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:50,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1295935850] [2022-11-25 22:18:50,100 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1295935850] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:50,100 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:18:50,101 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 22:18:50,101 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1497895163] [2022-11-25 22:18:50,102 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:50,102 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 22:18:50,102 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:50,102 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 22:18:50,103 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:18:50,103 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:50,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:50,233 INFO L93 Difference]: Finished difference Result 62 states and 71 transitions. [2022-11-25 22:18:50,233 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 22:18:50,233 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-25 22:18:50,234 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:50,234 INFO L225 Difference]: With dead ends: 62 [2022-11-25 22:18:50,234 INFO L226 Difference]: Without dead ends: 62 [2022-11-25 22:18:50,234 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-11-25 22:18:50,236 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 96 mSDsluCounter, 30 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 47 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:50,236 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 47 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:18:50,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-25 22:18:50,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 38. [2022-11-25 22:18:50,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 24 states have (on average 1.8333333333333333) internal successors, (44), 37 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:50,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 44 transitions. [2022-11-25 22:18:50,239 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 44 transitions. Word has length 6 [2022-11-25 22:18:50,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:50,239 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 44 transitions. [2022-11-25 22:18:50,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:50,239 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 44 transitions. [2022-11-25 22:18:50,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-25 22:18:50,239 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:50,240 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:18:50,240 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-25 22:18:50,240 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:50,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:50,240 INFO L85 PathProgramCache]: Analyzing trace with hash 1444652734, now seen corresponding path program 1 times [2022-11-25 22:18:50,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:50,241 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1200647385] [2022-11-25 22:18:50,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:50,241 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:50,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:50,460 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:50,460 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:50,460 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1200647385] [2022-11-25 22:18:50,460 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1200647385] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:18:50,460 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [302070104] [2022-11-25 22:18:50,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:50,461 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:18:50,461 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:18:50,462 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:18:50,474 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-25 22:18:50,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:50,543 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 14 conjunts are in the unsatisfiable core [2022-11-25 22:18:50,545 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:18:50,594 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-25 22:18:50,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-25 22:18:50,720 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 22:18:50,720 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 22:18:50,721 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [302070104] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:50,721 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 22:18:50,721 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [5] total 9 [2022-11-25 22:18:50,721 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [871641428] [2022-11-25 22:18:50,721 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:50,721 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 22:18:50,721 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:50,723 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 22:18:50,723 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-11-25 22:18:50,723 INFO L87 Difference]: Start difference. First operand 38 states and 44 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:50,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:50,822 INFO L93 Difference]: Finished difference Result 36 states and 42 transitions. [2022-11-25 22:18:50,823 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 22:18:50,823 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-25 22:18:50,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:50,823 INFO L225 Difference]: With dead ends: 36 [2022-11-25 22:18:50,823 INFO L226 Difference]: Without dead ends: 36 [2022-11-25 22:18:50,823 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2022-11-25 22:18:50,824 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 63 mSDsluCounter, 17 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 33 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:50,824 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 33 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:18:50,825 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-25 22:18:50,826 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 35. [2022-11-25 22:18:50,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 23 states have (on average 1.7826086956521738) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:50,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-11-25 22:18:50,827 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 7 [2022-11-25 22:18:50,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:50,827 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-11-25 22:18:50,827 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:50,827 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-11-25 22:18:50,827 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-25 22:18:50,827 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:50,828 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:18:50,838 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-25 22:18:51,029 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:18:51,029 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:51,029 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:51,029 INFO L85 PathProgramCache]: Analyzing trace with hash 1444655533, now seen corresponding path program 1 times [2022-11-25 22:18:51,030 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:51,030 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [914168526] [2022-11-25 22:18:51,030 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:51,030 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:51,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:51,504 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:51,504 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:51,505 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [914168526] [2022-11-25 22:18:51,505 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [914168526] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:18:51,505 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1711302062] [2022-11-25 22:18:51,505 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:51,505 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:18:51,506 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:18:51,507 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:18:51,521 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-25 22:18:51,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:51,594 INFO L263 TraceCheckSpWp]: Trace formula consists of 73 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-25 22:18:51,596 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:18:51,648 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:18:51,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-25 22:18:51,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:18:51,846 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:51,846 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:18:51,996 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:18:52,023 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:52,023 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1711302062] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:18:52,024 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [315889913] [2022-11-25 22:18:52,026 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-25 22:18:52,026 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:18:52,026 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:18:52,026 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:18:52,026 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:18:52,069 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:18:52,081 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:18:52,082 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:18:52,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:18:52,226 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:18:52,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:18:52,318 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:18:53,123 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1069#(and (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (or (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~length1~0#1|) (+ |ULTIMATE.start_main_~n~0#1| (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|)))) (not (<= (+ |ULTIMATE.start_main_~n~0#1| 1) (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~length1~0#1|)))) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (not (< (+ |ULTIMATE.start_main_~i~0#1| |ULTIMATE.start_main_~n~0#1| 1) |ULTIMATE.start_main_~length1~0#1|)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (not (< (+ |ULTIMATE.start_main_~i~1#1| 1) |ULTIMATE.start_main_~length2~0#1|)) (<= 0 |#NULL.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:18:53,124 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:18:53,124 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:18:53,124 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-11-25 22:18:53,124 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1088716118] [2022-11-25 22:18:53,125 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:18:53,125 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-25 22:18:53,125 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:53,126 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-25 22:18:53,126 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=133, Invalid=373, Unknown=0, NotChecked=0, Total=506 [2022-11-25 22:18:53,126 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:53,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:53,435 INFO L93 Difference]: Finished difference Result 59 states and 68 transitions. [2022-11-25 22:18:53,435 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-25 22:18:53,435 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-25 22:18:53,435 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:53,436 INFO L225 Difference]: With dead ends: 59 [2022-11-25 22:18:53,436 INFO L226 Difference]: Without dead ends: 59 [2022-11-25 22:18:53,436 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 200 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=188, Invalid=514, Unknown=0, NotChecked=0, Total=702 [2022-11-25 22:18:53,437 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 328 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 328 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:53,437 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [328 Valid, 94 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:18:53,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-25 22:18:53,438 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 33. [2022-11-25 22:18:53,439 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:53,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-11-25 22:18:53,439 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 7 [2022-11-25 22:18:53,439 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:53,439 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-11-25 22:18:53,439 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:53,440 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-11-25 22:18:53,440 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-25 22:18:53,440 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:53,440 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:18:53,455 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-25 22:18:53,645 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:18:53,645 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:53,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:53,646 INFO L85 PathProgramCache]: Analyzing trace with hash 1541759385, now seen corresponding path program 1 times [2022-11-25 22:18:53,646 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:53,646 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1691295235] [2022-11-25 22:18:53,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:53,647 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:53,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:53,686 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:53,687 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:53,687 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1691295235] [2022-11-25 22:18:53,687 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1691295235] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:53,687 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:18:53,687 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 22:18:53,687 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1154752257] [2022-11-25 22:18:53,687 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:53,688 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 22:18:53,688 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:53,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 22:18:53,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 22:18:53,688 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:53,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:53,733 INFO L93 Difference]: Finished difference Result 29 states and 35 transitions. [2022-11-25 22:18:53,733 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 22:18:53,733 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-25 22:18:53,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:53,734 INFO L225 Difference]: With dead ends: 29 [2022-11-25 22:18:53,734 INFO L226 Difference]: Without dead ends: 29 [2022-11-25 22:18:53,734 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:18:53,735 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 45 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:53,735 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 14 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:18:53,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-25 22:18:53,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-25 22:18:53,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 22 states have (on average 1.5909090909090908) internal successors, (35), 28 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:53,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 35 transitions. [2022-11-25 22:18:53,737 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 35 transitions. Word has length 7 [2022-11-25 22:18:53,737 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:53,737 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 35 transitions. [2022-11-25 22:18:53,737 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:53,737 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 35 transitions. [2022-11-25 22:18:53,737 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-25 22:18:53,738 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:53,738 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:18:53,738 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-25 22:18:53,738 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:53,738 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:53,738 INFO L85 PathProgramCache]: Analyzing trace with hash 1541759386, now seen corresponding path program 1 times [2022-11-25 22:18:53,739 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:53,739 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1638138331] [2022-11-25 22:18:53,739 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:53,739 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:53,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:53,841 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:53,841 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:53,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1638138331] [2022-11-25 22:18:53,841 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1638138331] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:53,841 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:18:53,841 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 22:18:53,842 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [747621914] [2022-11-25 22:18:53,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:53,842 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 22:18:53,842 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:53,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 22:18:53,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:18:53,843 INFO L87 Difference]: Start difference. First operand 29 states and 35 transitions. Second operand has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:53,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:53,906 INFO L93 Difference]: Finished difference Result 46 states and 55 transitions. [2022-11-25 22:18:53,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 22:18:53,907 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-25 22:18:53,907 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:53,907 INFO L225 Difference]: With dead ends: 46 [2022-11-25 22:18:53,907 INFO L226 Difference]: Without dead ends: 46 [2022-11-25 22:18:53,908 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-25 22:18:53,908 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 107 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:53,909 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 26 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:18:53,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-25 22:18:53,910 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 39. [2022-11-25 22:18:53,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 32 states have (on average 1.59375) internal successors, (51), 38 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:53,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 51 transitions. [2022-11-25 22:18:53,911 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 51 transitions. Word has length 7 [2022-11-25 22:18:53,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:53,912 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 51 transitions. [2022-11-25 22:18:53,912 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:53,912 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 51 transitions. [2022-11-25 22:18:53,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-25 22:18:53,913 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:53,913 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:18:53,913 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-25 22:18:53,914 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:53,914 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:53,914 INFO L85 PathProgramCache]: Analyzing trace with hash -132946573, now seen corresponding path program 1 times [2022-11-25 22:18:53,914 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:53,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1412020339] [2022-11-25 22:18:53,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:53,915 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:53,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:54,296 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:54,296 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:54,296 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1412020339] [2022-11-25 22:18:54,296 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1412020339] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:18:54,296 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [289005136] [2022-11-25 22:18:54,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:54,296 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:18:54,297 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:18:54,298 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:18:54,317 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-25 22:18:54,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:54,377 INFO L263 TraceCheckSpWp]: Trace formula consists of 111 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-25 22:18:54,379 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:18:54,386 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:18:54,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:18:54,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 22:18:54,561 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:18:54,565 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:18:54,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-25 22:18:54,584 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:54,585 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 22:18:54,585 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [289005136] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:54,585 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 22:18:54,585 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [5] total 12 [2022-11-25 22:18:54,585 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [573512323] [2022-11-25 22:18:54,586 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:54,586 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-25 22:18:54,586 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:54,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-25 22:18:54,587 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2022-11-25 22:18:54,587 INFO L87 Difference]: Start difference. First operand 39 states and 51 transitions. Second operand has 7 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:54,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:54,875 INFO L93 Difference]: Finished difference Result 93 states and 113 transitions. [2022-11-25 22:18:54,876 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 22:18:54,876 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-25 22:18:54,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:54,877 INFO L225 Difference]: With dead ends: 93 [2022-11-25 22:18:54,878 INFO L226 Difference]: Without dead ends: 93 [2022-11-25 22:18:54,878 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=49, Invalid=191, Unknown=0, NotChecked=0, Total=240 [2022-11-25 22:18:54,878 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 142 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:54,879 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 128 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:18:54,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-11-25 22:18:54,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 43. [2022-11-25 22:18:54,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 36 states have (on average 1.5277777777777777) internal successors, (55), 42 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:54,881 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 55 transitions. [2022-11-25 22:18:54,882 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 55 transitions. Word has length 9 [2022-11-25 22:18:54,882 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:54,882 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 55 transitions. [2022-11-25 22:18:54,882 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:54,882 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 55 transitions. [2022-11-25 22:18:54,882 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-25 22:18:54,882 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:54,882 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:18:54,888 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-25 22:18:55,088 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-25 22:18:55,088 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:55,088 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:55,089 INFO L85 PathProgramCache]: Analyzing trace with hash -1736430642, now seen corresponding path program 1 times [2022-11-25 22:18:55,089 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:55,089 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [533833573] [2022-11-25 22:18:55,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:55,089 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:55,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:55,281 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:55,282 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:55,282 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [533833573] [2022-11-25 22:18:55,282 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [533833573] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:18:55,282 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1612636040] [2022-11-25 22:18:55,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:55,282 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:18:55,283 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:18:55,285 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:18:55,305 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-25 22:18:55,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:55,368 INFO L263 TraceCheckSpWp]: Trace formula consists of 124 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-25 22:18:55,369 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:18:55,449 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:55,449 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:18:55,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-25 22:18:55,571 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:55,572 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1612636040] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:18:55,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [507297598] [2022-11-25 22:18:55,574 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:18:55,574 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:18:55,574 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:18:55,574 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:18:55,574 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:18:55,620 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:18:55,624 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:18:55,625 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:18:55,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:18:55,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:18:55,763 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:18:55,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:18:55,932 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:18:55,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:18:56,081 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:18:57,854 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1588#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:18:57,854 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:18:57,854 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:18:57,854 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 16 [2022-11-25 22:18:57,854 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [881204087] [2022-11-25 22:18:57,855 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:18:57,855 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-25 22:18:57,855 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:57,855 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-25 22:18:57,856 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=558, Unknown=0, NotChecked=0, Total=650 [2022-11-25 22:18:57,856 INFO L87 Difference]: Start difference. First operand 43 states and 55 transitions. Second operand has 17 states, 16 states have (on average 1.5625) internal successors, (25), 17 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:58,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:58,199 INFO L93 Difference]: Finished difference Result 98 states and 118 transitions. [2022-11-25 22:18:58,199 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-25 22:18:58,199 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.5625) internal successors, (25), 17 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-25 22:18:58,199 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:58,200 INFO L225 Difference]: With dead ends: 98 [2022-11-25 22:18:58,200 INFO L226 Difference]: Without dead ends: 98 [2022-11-25 22:18:58,200 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 264 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=153, Invalid=839, Unknown=0, NotChecked=0, Total=992 [2022-11-25 22:18:58,201 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 455 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 294 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 455 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 311 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 294 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:58,201 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [455 Valid, 184 Invalid, 311 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 294 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 22:18:58,202 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-11-25 22:18:58,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 46. [2022-11-25 22:18:58,203 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 40 states have (on average 1.525) internal successors, (61), 45 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:58,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 61 transitions. [2022-11-25 22:18:58,204 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 61 transitions. Word has length 11 [2022-11-25 22:18:58,204 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:58,204 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 61 transitions. [2022-11-25 22:18:58,204 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.5625) internal successors, (25), 17 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:58,204 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 61 transitions. [2022-11-25 22:18:58,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-25 22:18:58,205 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:58,205 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:18:58,215 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-25 22:18:58,405 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-25 22:18:58,405 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:58,406 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:58,406 INFO L85 PathProgramCache]: Analyzing trace with hash 1087317027, now seen corresponding path program 1 times [2022-11-25 22:18:58,406 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:58,406 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [392265045] [2022-11-25 22:18:58,406 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:58,407 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:58,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:58,451 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:58,451 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:58,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [392265045] [2022-11-25 22:18:58,452 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [392265045] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:58,452 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:18:58,452 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 22:18:58,452 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2051714576] [2022-11-25 22:18:58,452 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:58,453 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 22:18:58,453 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:58,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 22:18:58,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 22:18:58,454 INFO L87 Difference]: Start difference. First operand 46 states and 61 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:58,494 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:58,495 INFO L93 Difference]: Finished difference Result 47 states and 62 transitions. [2022-11-25 22:18:58,495 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 22:18:58,495 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-25 22:18:58,495 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:58,496 INFO L225 Difference]: With dead ends: 47 [2022-11-25 22:18:58,496 INFO L226 Difference]: Without dead ends: 47 [2022-11-25 22:18:58,496 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:18:58,497 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 18 mSDsluCounter, 12 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:58,497 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 30 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:18:58,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2022-11-25 22:18:58,499 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 45. [2022-11-25 22:18:58,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 40 states have (on average 1.45) internal successors, (58), 44 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:58,499 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 58 transitions. [2022-11-25 22:18:58,499 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 58 transitions. Word has length 11 [2022-11-25 22:18:58,500 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:58,500 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 58 transitions. [2022-11-25 22:18:58,500 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:58,500 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 58 transitions. [2022-11-25 22:18:58,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-25 22:18:58,501 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:58,501 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:18:58,501 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-25 22:18:58,501 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:58,501 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:58,502 INFO L85 PathProgramCache]: Analyzing trace with hash 1087317028, now seen corresponding path program 1 times [2022-11-25 22:18:58,502 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:58,502 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901903868] [2022-11-25 22:18:58,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:58,502 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:58,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:58,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:58,641 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:58,641 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901903868] [2022-11-25 22:18:58,641 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901903868] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:18:58,641 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:18:58,641 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 22:18:58,641 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1189466625] [2022-11-25 22:18:58,642 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:18:58,642 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 22:18:58,642 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:18:58,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 22:18:58,643 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:18:58,643 INFO L87 Difference]: Start difference. First operand 45 states and 58 transitions. Second operand has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:58,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:18:58,729 INFO L93 Difference]: Finished difference Result 66 states and 84 transitions. [2022-11-25 22:18:58,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 22:18:58,729 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-25 22:18:58,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:18:58,730 INFO L225 Difference]: With dead ends: 66 [2022-11-25 22:18:58,730 INFO L226 Difference]: Without dead ends: 66 [2022-11-25 22:18:58,730 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-25 22:18:58,730 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 57 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:18:58,731 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 29 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:18:58,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2022-11-25 22:18:58,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 54. [2022-11-25 22:18:58,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 49 states have (on average 1.4489795918367347) internal successors, (71), 53 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:58,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 71 transitions. [2022-11-25 22:18:58,733 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 71 transitions. Word has length 11 [2022-11-25 22:18:58,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:18:58,733 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 71 transitions. [2022-11-25 22:18:58,734 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:18:58,734 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 71 transitions. [2022-11-25 22:18:58,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-25 22:18:58,734 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:18:58,734 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:18:58,734 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-11-25 22:18:58,735 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:18:58,735 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:18:58,735 INFO L85 PathProgramCache]: Analyzing trace with hash 2032431783, now seen corresponding path program 2 times [2022-11-25 22:18:58,735 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:18:58,735 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1579844692] [2022-11-25 22:18:58,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:18:58,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:18:58,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:18:59,254 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:59,255 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:18:59,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1579844692] [2022-11-25 22:18:59,255 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1579844692] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:18:59,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2012007826] [2022-11-25 22:18:59,255 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:18:59,256 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:18:59,256 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:18:59,257 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:18:59,275 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-25 22:18:59,355 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 22:18:59,355 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:18:59,357 INFO L263 TraceCheckSpWp]: Trace formula consists of 135 conjuncts, 46 conjunts are in the unsatisfiable core [2022-11-25 22:18:59,359 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:18:59,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:18:59,586 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:18:59,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 26 [2022-11-25 22:18:59,840 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:18:59,841 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:18:59,842 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:18:59,842 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:18:59,851 INFO L321 Elim1Store]: treesize reduction 4, result has 66.7 percent of original size [2022-11-25 22:18:59,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 38 treesize of output 21 [2022-11-25 22:18:59,879 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 2 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:18:59,879 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:19:00,090 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:00,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 93 treesize of output 83 [2022-11-25 22:19:00,339 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:00,339 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2012007826] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:19:00,340 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2139384586] [2022-11-25 22:19:00,342 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:19:00,342 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:19:00,342 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:19:00,342 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:19:00,342 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:19:00,383 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:00,387 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:00,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:19:00,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:00,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:00,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:00,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:19:00,649 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:19:00,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:19:00,833 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:19:02,897 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2081#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:19:02,898 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:19:02,898 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:19:02,898 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 12, 12] total 29 [2022-11-25 22:19:02,898 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1371790148] [2022-11-25 22:19:02,898 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:19:02,899 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-25 22:19:02,899 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:19:02,899 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-25 22:19:02,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=124, Invalid=1282, Unknown=0, NotChecked=0, Total=1406 [2022-11-25 22:19:02,900 INFO L87 Difference]: Start difference. First operand 54 states and 71 transitions. Second operand has 29 states, 29 states have (on average 1.2413793103448276) internal successors, (36), 29 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:11,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:19:11,305 INFO L93 Difference]: Finished difference Result 435 states and 504 transitions. [2022-11-25 22:19:11,305 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-11-25 22:19:11,305 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 1.2413793103448276) internal successors, (36), 29 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-25 22:19:11,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:19:11,307 INFO L225 Difference]: With dead ends: 435 [2022-11-25 22:19:11,307 INFO L226 Difference]: Without dead ends: 435 [2022-11-25 22:19:11,310 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 89 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1928 ImplicationChecksByTransitivity, 9.8s TimeCoverageRelationStatistics Valid=1264, Invalid=6926, Unknown=0, NotChecked=0, Total=8190 [2022-11-25 22:19:11,311 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 1778 mSDsluCounter, 756 mSDsCounter, 0 mSdLazyCounter, 1245 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1778 SdHoareTripleChecker+Valid, 789 SdHoareTripleChecker+Invalid, 1299 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 1245 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-25 22:19:11,311 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1778 Valid, 789 Invalid, 1299 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 1245 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-25 22:19:11,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 435 states. [2022-11-25 22:19:11,315 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 435 to 75. [2022-11-25 22:19:11,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 74 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:11,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 101 transitions. [2022-11-25 22:19:11,316 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 101 transitions. Word has length 13 [2022-11-25 22:19:11,316 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:19:11,316 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 101 transitions. [2022-11-25 22:19:11,317 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 1.2413793103448276) internal successors, (36), 29 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:11,317 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 101 transitions. [2022-11-25 22:19:11,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-25 22:19:11,318 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:19:11,318 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:19:11,331 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-25 22:19:11,523 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-11-25 22:19:11,524 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:19:11,524 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:19:11,524 INFO L85 PathProgramCache]: Analyzing trace with hash 1320410540, now seen corresponding path program 1 times [2022-11-25 22:19:11,524 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:19:11,524 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [936840112] [2022-11-25 22:19:11,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:11,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:19:11,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:11,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:11,591 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:19:11,592 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [936840112] [2022-11-25 22:19:11,592 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [936840112] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:19:11,592 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:19:11,592 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 22:19:11,592 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [634408091] [2022-11-25 22:19:11,592 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:19:11,593 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 22:19:11,593 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:19:11,594 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 22:19:11,594 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:19:11,594 INFO L87 Difference]: Start difference. First operand 75 states and 101 transitions. Second operand has 5 states, 5 states have (on average 3.0) internal successors, (15), 4 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:11,648 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:19:11,648 INFO L93 Difference]: Finished difference Result 78 states and 98 transitions. [2022-11-25 22:19:11,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 22:19:11,648 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 3.0) internal successors, (15), 4 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-25 22:19:11,649 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:19:11,649 INFO L225 Difference]: With dead ends: 78 [2022-11-25 22:19:11,649 INFO L226 Difference]: Without dead ends: 78 [2022-11-25 22:19:11,649 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-25 22:19:11,650 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 55 mSDsluCounter, 24 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 40 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:19:11,651 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 40 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:19:11,651 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-25 22:19:11,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 68. [2022-11-25 22:19:11,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 63 states have (on average 1.3650793650793651) internal successors, (86), 67 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:11,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 86 transitions. [2022-11-25 22:19:11,660 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 86 transitions. Word has length 15 [2022-11-25 22:19:11,661 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:19:11,662 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 86 transitions. [2022-11-25 22:19:11,662 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 3.0) internal successors, (15), 4 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:11,662 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 86 transitions. [2022-11-25 22:19:11,664 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-25 22:19:11,664 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:19:11,664 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:19:11,665 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-11-25 22:19:11,665 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:19:11,665 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:19:11,665 INFO L85 PathProgramCache]: Analyzing trace with hash -1735464012, now seen corresponding path program 1 times [2022-11-25 22:19:11,665 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:19:11,666 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1687303902] [2022-11-25 22:19:11,666 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:11,666 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:19:11,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:11,902 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:11,902 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:19:11,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1687303902] [2022-11-25 22:19:11,902 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1687303902] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:19:11,903 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:19:11,903 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 22:19:11,903 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [449916138] [2022-11-25 22:19:11,903 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:19:11,903 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-25 22:19:11,904 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:19:11,904 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-25 22:19:11,904 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-25 22:19:11,904 INFO L87 Difference]: Start difference. First operand 68 states and 86 transitions. Second operand has 8 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:12,171 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:19:12,171 INFO L93 Difference]: Finished difference Result 81 states and 98 transitions. [2022-11-25 22:19:12,171 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-25 22:19:12,172 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-25 22:19:12,172 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:19:12,172 INFO L225 Difference]: With dead ends: 81 [2022-11-25 22:19:12,172 INFO L226 Difference]: Without dead ends: 81 [2022-11-25 22:19:12,173 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2022-11-25 22:19:12,173 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 34 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 102 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:19:12,174 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 110 Invalid, 102 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:19:12,174 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-11-25 22:19:12,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 73. [2022-11-25 22:19:12,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 72 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:12,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 90 transitions. [2022-11-25 22:19:12,176 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 90 transitions. Word has length 16 [2022-11-25 22:19:12,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:19:12,177 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 90 transitions. [2022-11-25 22:19:12,177 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:12,177 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 90 transitions. [2022-11-25 22:19:12,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-25 22:19:12,177 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:19:12,178 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:19:12,178 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-11-25 22:19:12,178 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:19:12,178 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:19:12,179 INFO L85 PathProgramCache]: Analyzing trace with hash 1089060187, now seen corresponding path program 3 times [2022-11-25 22:19:12,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:19:12,179 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1924690397] [2022-11-25 22:19:12,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:12,179 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:19:12,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:12,691 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:12,691 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:19:12,691 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1924690397] [2022-11-25 22:19:12,691 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1924690397] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:19:12,692 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [512021158] [2022-11-25 22:19:12,692 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:19:12,692 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:19:12,692 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:19:12,693 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:19:12,701 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-25 22:19:12,799 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:19:12,799 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:19:12,801 INFO L263 TraceCheckSpWp]: Trace formula consists of 159 conjuncts, 45 conjunts are in the unsatisfiable core [2022-11-25 22:19:12,803 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:19:12,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:19:12,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:19:13,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 22:19:13,206 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-25 22:19:13,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-25 22:19:13,236 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:13,236 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:19:13,353 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_244 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_244) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-25 22:19:13,375 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:13,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-25 22:19:13,405 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:13,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-25 22:19:13,591 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:13,592 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [512021158] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:19:13,592 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [33531992] [2022-11-25 22:19:13,594 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:19:13,594 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:19:13,594 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:19:13,594 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:19:13,594 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:19:13,664 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:13,668 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:13,669 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:19:13,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:19:13,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:13,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:13,891 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:19:13,952 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:19:13,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:19:14,089 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:19:16,123 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3158#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:19:16,123 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:19:16,123 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:19:16,124 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 12, 12] total 27 [2022-11-25 22:19:16,124 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1740566375] [2022-11-25 22:19:16,124 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:19:16,124 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-25 22:19:16,124 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:19:16,125 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-25 22:19:16,125 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=104, Invalid=1089, Unknown=1, NotChecked=66, Total=1260 [2022-11-25 22:19:16,126 INFO L87 Difference]: Start difference. First operand 73 states and 90 transitions. Second operand has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:20,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:19:20,577 INFO L93 Difference]: Finished difference Result 296 states and 325 transitions. [2022-11-25 22:19:20,578 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-11-25 22:19:20,578 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-25 22:19:20,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:19:20,579 INFO L225 Difference]: With dead ends: 296 [2022-11-25 22:19:20,579 INFO L226 Difference]: Without dead ends: 296 [2022-11-25 22:19:20,580 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 22 SyntacticMatches, 2 SemanticMatches, 67 ConstructedPredicates, 1 IntricatePredicates, 3 DeprecatedPredicates, 945 ImplicationChecksByTransitivity, 5.9s TimeCoverageRelationStatistics Valid=575, Invalid=3984, Unknown=1, NotChecked=132, Total=4692 [2022-11-25 22:19:20,580 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 1212 mSDsluCounter, 930 mSDsCounter, 0 mSdLazyCounter, 1461 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1212 SdHoareTripleChecker+Valid, 995 SdHoareTripleChecker+Invalid, 1703 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 1461 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 205 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-25 22:19:20,581 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1212 Valid, 995 Invalid, 1703 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 1461 Invalid, 0 Unknown, 205 Unchecked, 1.2s Time] [2022-11-25 22:19:20,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2022-11-25 22:19:20,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 91. [2022-11-25 22:19:20,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 86 states have (on average 1.3372093023255813) internal successors, (115), 90 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:20,584 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 115 transitions. [2022-11-25 22:19:20,584 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 115 transitions. Word has length 17 [2022-11-25 22:19:20,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:19:20,592 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 115 transitions. [2022-11-25 22:19:20,592 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:20,592 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 115 transitions. [2022-11-25 22:19:20,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-25 22:19:20,593 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:19:20,593 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:19:20,604 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-25 22:19:20,793 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:19:20,794 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:19:20,794 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:19:20,794 INFO L85 PathProgramCache]: Analyzing trace with hash 2034027914, now seen corresponding path program 1 times [2022-11-25 22:19:20,794 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:19:20,794 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1208477506] [2022-11-25 22:19:20,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:20,794 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:19:20,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:20,966 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:20,966 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:19:20,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1208477506] [2022-11-25 22:19:20,967 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1208477506] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:19:20,967 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:19:20,967 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 22:19:20,967 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1678155841] [2022-11-25 22:19:20,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:19:20,968 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 22:19:20,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:19:20,968 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 22:19:20,968 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:19:20,968 INFO L87 Difference]: Start difference. First operand 91 states and 115 transitions. Second operand has 5 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:20,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:19:20,997 INFO L93 Difference]: Finished difference Result 90 states and 114 transitions. [2022-11-25 22:19:20,998 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 22:19:20,998 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-25 22:19:20,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:19:20,998 INFO L225 Difference]: With dead ends: 90 [2022-11-25 22:19:20,999 INFO L226 Difference]: Without dead ends: 75 [2022-11-25 22:19:20,999 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:19:20,999 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 15 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:19:21,000 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 30 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:19:21,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-25 22:19:21,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-11-25 22:19:21,002 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 71 states have (on average 1.267605633802817) internal successors, (90), 74 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:21,003 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 90 transitions. [2022-11-25 22:19:21,003 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 90 transitions. Word has length 17 [2022-11-25 22:19:21,003 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:19:21,003 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 90 transitions. [2022-11-25 22:19:21,003 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:21,004 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 90 transitions. [2022-11-25 22:19:21,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-25 22:19:21,008 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:19:21,008 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:19:21,008 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-11-25 22:19:21,008 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:19:21,008 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:19:21,009 INFO L85 PathProgramCache]: Analyzing trace with hash -60663559, now seen corresponding path program 1 times [2022-11-25 22:19:21,009 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:19:21,009 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [576937162] [2022-11-25 22:19:21,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:21,009 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:19:21,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:21,233 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 22:19:21,233 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:19:21,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [576937162] [2022-11-25 22:19:21,234 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [576937162] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:19:21,234 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:19:21,234 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-25 22:19:21,234 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [485041022] [2022-11-25 22:19:21,234 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:19:21,234 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-25 22:19:21,235 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:19:21,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-25 22:19:21,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2022-11-25 22:19:21,235 INFO L87 Difference]: Start difference. First operand 75 states and 90 transitions. Second operand has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:21,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:19:21,501 INFO L93 Difference]: Finished difference Result 123 states and 143 transitions. [2022-11-25 22:19:21,503 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-25 22:19:21,504 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-25 22:19:21,504 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:19:21,504 INFO L225 Difference]: With dead ends: 123 [2022-11-25 22:19:21,504 INFO L226 Difference]: Without dead ends: 93 [2022-11-25 22:19:21,504 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=149, Unknown=0, NotChecked=0, Total=210 [2022-11-25 22:19:21,505 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 46 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 80 SdHoareTripleChecker+Invalid, 88 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:19:21,505 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 80 Invalid, 88 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:19:21,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-11-25 22:19:21,507 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 89. [2022-11-25 22:19:21,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 85 states have (on average 1.2470588235294118) internal successors, (106), 88 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:21,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 106 transitions. [2022-11-25 22:19:21,507 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 106 transitions. Word has length 18 [2022-11-25 22:19:21,507 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:19:21,508 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 106 transitions. [2022-11-25 22:19:21,508 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:21,508 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 106 transitions. [2022-11-25 22:19:21,508 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-25 22:19:21,508 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:19:21,508 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:19:21,508 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-11-25 22:19:21,508 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:19:21,512 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:19:21,512 INFO L85 PathProgramCache]: Analyzing trace with hash -290483447, now seen corresponding path program 1 times [2022-11-25 22:19:21,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:19:21,513 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1609243608] [2022-11-25 22:19:21,513 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:21,513 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:19:21,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:21,751 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 22:19:21,751 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:19:21,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1609243608] [2022-11-25 22:19:21,752 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1609243608] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:19:21,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1297932998] [2022-11-25 22:19:21,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:21,752 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:19:21,752 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:19:21,753 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:19:21,776 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-25 22:19:21,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:21,852 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-25 22:19:21,854 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:19:21,941 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 22:19:21,941 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:19:22,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 22:19:22,092 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 22:19:22,092 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1297932998] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:19:22,092 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1443055297] [2022-11-25 22:19:22,094 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:19:22,094 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:19:22,095 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:19:22,095 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:19:22,095 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:19:22,152 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:22,157 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:22,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:19:22,218 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:22,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:22,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:22,374 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:19:22,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:22,440 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:22,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:19:22,544 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:19:22,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:19:22,737 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:19:22,741 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:19:22,798 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:19:22,798 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:19:22,992 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:19:22,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:19:23,094 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:19:23,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:19:23,147 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:19:25,573 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4155#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:19:25,574 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:19:25,574 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:19:25,574 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 7, 7] total 17 [2022-11-25 22:19:25,574 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [909162682] [2022-11-25 22:19:25,574 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:19:25,575 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-25 22:19:25,575 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:19:25,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-25 22:19:25,576 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=149, Invalid=843, Unknown=0, NotChecked=0, Total=992 [2022-11-25 22:19:25,576 INFO L87 Difference]: Start difference. First operand 89 states and 106 transitions. Second operand has 18 states, 17 states have (on average 2.6470588235294117) internal successors, (45), 18 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:25,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:19:25,858 INFO L93 Difference]: Finished difference Result 117 states and 132 transitions. [2022-11-25 22:19:25,860 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-25 22:19:25,860 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 17 states have (on average 2.6470588235294117) internal successors, (45), 18 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-25 22:19:25,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:19:25,861 INFO L225 Difference]: With dead ends: 117 [2022-11-25 22:19:25,861 INFO L226 Difference]: Without dead ends: 117 [2022-11-25 22:19:25,862 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 35 SyntacticMatches, 2 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 376 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=218, Invalid=1264, Unknown=0, NotChecked=0, Total=1482 [2022-11-25 22:19:25,862 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 150 mSDsluCounter, 78 mSDsCounter, 0 mSdLazyCounter, 208 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 150 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 213 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:19:25,863 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [150 Valid, 95 Invalid, 213 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 208 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:19:25,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-11-25 22:19:25,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 104. [2022-11-25 22:19:25,865 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 100 states have (on average 1.21) internal successors, (121), 103 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:25,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 121 transitions. [2022-11-25 22:19:25,866 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 121 transitions. Word has length 20 [2022-11-25 22:19:25,866 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:19:25,866 INFO L495 AbstractCegarLoop]: Abstraction has 104 states and 121 transitions. [2022-11-25 22:19:25,866 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 17 states have (on average 2.6470588235294117) internal successors, (45), 18 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:25,866 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 121 transitions. [2022-11-25 22:19:25,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-25 22:19:25,867 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:19:25,867 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:19:25,872 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-25 22:19:26,072 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-25 22:19:26,073 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:19:26,073 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:19:26,073 INFO L85 PathProgramCache]: Analyzing trace with hash -2039962225, now seen corresponding path program 4 times [2022-11-25 22:19:26,073 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:19:26,073 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [325436254] [2022-11-25 22:19:26,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:26,074 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:19:26,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:26,779 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 1 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:26,779 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:19:26,779 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [325436254] [2022-11-25 22:19:26,780 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [325436254] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:19:26,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2084492922] [2022-11-25 22:19:26,780 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:19:26,780 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:19:26,780 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:19:26,781 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:19:26,789 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-25 22:19:26,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:26,889 INFO L263 TraceCheckSpWp]: Trace formula consists of 183 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-25 22:19:26,891 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:19:26,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:19:27,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:19:27,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 22:19:27,419 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-25 22:19:27,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-25 22:19:27,448 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:27,449 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:19:27,612 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_335 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_335) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-25 22:19:27,619 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:27,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-25 22:19:27,630 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:27,631 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-25 22:19:27,831 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:27,831 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2084492922] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:19:27,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2040881681] [2022-11-25 22:19:27,836 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:19:27,836 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:19:27,837 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:19:27,837 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:19:27,837 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:19:27,874 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:27,877 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:27,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:19:27,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:19:27,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:28,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:28,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:19:28,132 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:19:28,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:19:28,268 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:19:30,358 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4556#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:19:30,358 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:19:30,358 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:19:30,358 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 14, 14] total 32 [2022-11-25 22:19:30,358 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2018700710] [2022-11-25 22:19:30,358 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:19:30,359 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-25 22:19:30,359 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:19:30,359 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-25 22:19:30,360 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=118, Invalid=1445, Unknown=1, NotChecked=76, Total=1640 [2022-11-25 22:19:30,360 INFO L87 Difference]: Start difference. First operand 104 states and 121 transitions. Second operand has 32 states, 32 states have (on average 1.6875) internal successors, (54), 32 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:33,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:19:33,899 INFO L93 Difference]: Finished difference Result 305 states and 333 transitions. [2022-11-25 22:19:33,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-25 22:19:33,900 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.6875) internal successors, (54), 32 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-11-25 22:19:33,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:19:33,901 INFO L225 Difference]: With dead ends: 305 [2022-11-25 22:19:33,901 INFO L226 Difference]: Without dead ends: 291 [2022-11-25 22:19:33,902 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 31 SyntacticMatches, 2 SemanticMatches, 63 ConstructedPredicates, 1 IntricatePredicates, 4 DeprecatedPredicates, 765 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=417, Invalid=3618, Unknown=1, NotChecked=124, Total=4160 [2022-11-25 22:19:33,903 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 973 mSDsluCounter, 527 mSDsCounter, 0 mSdLazyCounter, 1298 mSolverCounterSat, 22 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 973 SdHoareTripleChecker+Valid, 562 SdHoareTripleChecker+Invalid, 1459 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 1298 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 137 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:19:33,903 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [973 Valid, 562 Invalid, 1459 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 1298 Invalid, 2 Unknown, 137 Unchecked, 1.1s Time] [2022-11-25 22:19:33,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2022-11-25 22:19:33,906 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 130. [2022-11-25 22:19:33,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130 states, 126 states have (on average 1.2063492063492063) internal successors, (152), 129 states have internal predecessors, (152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:33,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130 states to 130 states and 152 transitions. [2022-11-25 22:19:33,907 INFO L78 Accepts]: Start accepts. Automaton has 130 states and 152 transitions. Word has length 21 [2022-11-25 22:19:33,907 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:19:33,907 INFO L495 AbstractCegarLoop]: Abstraction has 130 states and 152 transitions. [2022-11-25 22:19:33,908 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.6875) internal successors, (54), 32 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:33,908 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 152 transitions. [2022-11-25 22:19:33,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-25 22:19:33,908 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:19:33,908 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:19:33,916 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-25 22:19:34,113 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-11-25 22:19:34,113 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:19:34,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:19:34,113 INFO L85 PathProgramCache]: Analyzing trace with hash -1485927613, now seen corresponding path program 5 times [2022-11-25 22:19:34,114 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:19:34,114 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [609314177] [2022-11-25 22:19:34,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:34,114 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:19:34,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:34,928 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 4 proven. 37 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:34,929 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:19:34,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [609314177] [2022-11-25 22:19:34,929 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [609314177] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:19:34,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [730050835] [2022-11-25 22:19:34,929 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:19:34,929 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:19:34,929 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:19:34,933 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:19:34,949 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-25 22:19:35,067 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-25 22:19:35,067 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:19:35,069 INFO L263 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 55 conjunts are in the unsatisfiable core [2022-11-25 22:19:35,072 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:19:35,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:19:35,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:19:35,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 22:19:35,785 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-25 22:19:35,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-25 22:19:35,822 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:35,822 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:19:36,099 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:36,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-25 22:19:36,105 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:36,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-25 22:19:36,315 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:36,315 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [730050835] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:19:36,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1818503883] [2022-11-25 22:19:36,318 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:19:36,318 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:19:36,318 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:19:36,318 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:19:36,318 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:19:36,355 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:36,361 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:36,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:19:36,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:36,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:36,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:36,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:19:36,601 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:19:36,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:19:36,703 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:19:38,832 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5229#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:19:38,832 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:19:38,832 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:19:38,832 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 16, 16] total 37 [2022-11-25 22:19:38,833 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1274597314] [2022-11-25 22:19:38,833 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:19:38,833 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-11-25 22:19:38,833 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:19:38,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-11-25 22:19:38,834 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=133, Invalid=1925, Unknown=12, NotChecked=0, Total=2070 [2022-11-25 22:19:38,835 INFO L87 Difference]: Start difference. First operand 130 states and 152 transitions. Second operand has 37 states, 37 states have (on average 1.7297297297297298) internal successors, (64), 37 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:43,483 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:19:43,483 INFO L93 Difference]: Finished difference Result 414 states and 452 transitions. [2022-11-25 22:19:43,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-11-25 22:19:43,484 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 1.7297297297297298) internal successors, (64), 37 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-25 22:19:43,484 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:19:43,485 INFO L225 Difference]: With dead ends: 414 [2022-11-25 22:19:43,486 INFO L226 Difference]: Without dead ends: 398 [2022-11-25 22:19:43,488 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 40 SyntacticMatches, 2 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 5 DeprecatedPredicates, 1190 ImplicationChecksByTransitivity, 6.7s TimeCoverageRelationStatistics Valid=607, Invalid=5387, Unknown=12, NotChecked=0, Total=6006 [2022-11-25 22:19:43,489 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 1090 mSDsluCounter, 836 mSDsCounter, 0 mSdLazyCounter, 1976 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1090 SdHoareTripleChecker+Valid, 882 SdHoareTripleChecker+Invalid, 2009 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 1976 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-25 22:19:43,489 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1090 Valid, 882 Invalid, 2009 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 1976 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-25 22:19:43,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 398 states. [2022-11-25 22:19:43,494 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 398 to 156. [2022-11-25 22:19:43,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 152 states have (on average 1.2039473684210527) internal successors, (183), 155 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:43,495 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 183 transitions. [2022-11-25 22:19:43,495 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 183 transitions. Word has length 25 [2022-11-25 22:19:43,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:19:43,495 INFO L495 AbstractCegarLoop]: Abstraction has 156 states and 183 transitions. [2022-11-25 22:19:43,496 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 1.7297297297297298) internal successors, (64), 37 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:43,496 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 183 transitions. [2022-11-25 22:19:43,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-25 22:19:43,496 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:19:43,497 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:19:43,511 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-25 22:19:43,710 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:19:43,710 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:19:43,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:19:43,711 INFO L85 PathProgramCache]: Analyzing trace with hash -762772497, now seen corresponding path program 2 times [2022-11-25 22:19:43,711 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:19:43,711 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [651368633] [2022-11-25 22:19:43,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:43,711 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:19:43,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:44,263 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:44,264 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:19:44,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [651368633] [2022-11-25 22:19:44,264 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [651368633] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:19:44,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1801405708] [2022-11-25 22:19:44,264 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:19:44,264 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:19:44,264 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:19:44,265 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:19:44,289 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-25 22:19:44,391 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 22:19:44,391 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:19:44,393 INFO L263 TraceCheckSpWp]: Trace formula consists of 208 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-25 22:19:44,399 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:19:44,408 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:19:44,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:44,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 22:19:44,768 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-25 22:19:44,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-25 22:19:44,775 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 6 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:44,777 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:19:44,835 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_411 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_411) |c_ULTIMATE.start_cstrncat_~s2#1.base|) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) 0)) is different from false [2022-11-25 22:19:44,893 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:44,894 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 22:19:44,900 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:44,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 22:19:45,075 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-11-25 22:19:45,075 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1801405708] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:19:45,075 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [915020103] [2022-11-25 22:19:45,077 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:19:45,077 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:19:45,077 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:19:45,077 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:19:45,077 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:19:45,115 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:45,119 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:45,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:19:45,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:19:45,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:45,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:45,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:19:45,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:45,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:45,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:19:45,494 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:19:45,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:19:45,652 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:19:45,656 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:19:45,711 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:19:45,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:19:45,877 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:19:45,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:19:45,968 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:19:45,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:19:46,015 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:19:48,624 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6044#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:19:48,624 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:19:48,624 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:19:48,624 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 28 [2022-11-25 22:19:48,624 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1808703845] [2022-11-25 22:19:48,624 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:19:48,625 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-25 22:19:48,625 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:19:48,625 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-25 22:19:48,626 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=1467, Unknown=8, NotChecked=78, Total=1722 [2022-11-25 22:19:48,626 INFO L87 Difference]: Start difference. First operand 156 states and 183 transitions. Second operand has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:49,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:19:49,228 INFO L93 Difference]: Finished difference Result 180 states and 206 transitions. [2022-11-25 22:19:49,228 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-25 22:19:49,228 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-25 22:19:49,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:19:49,229 INFO L225 Difference]: With dead ends: 180 [2022-11-25 22:19:49,229 INFO L226 Difference]: Without dead ends: 151 [2022-11-25 22:19:49,231 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 46 SyntacticMatches, 2 SemanticMatches, 51 ConstructedPredicates, 1 IntricatePredicates, 2 DeprecatedPredicates, 668 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=332, Invalid=2316, Unknown=8, NotChecked=100, Total=2756 [2022-11-25 22:19:49,231 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 96 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 289 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 38 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 22:19:49,231 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 113 Invalid, 289 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 241 Invalid, 0 Unknown, 38 Unchecked, 0.2s Time] [2022-11-25 22:19:49,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-11-25 22:19:49,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 151. [2022-11-25 22:19:49,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 147 states have (on average 1.1972789115646258) internal successors, (176), 150 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:49,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 176 transitions. [2022-11-25 22:19:49,235 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 176 transitions. Word has length 25 [2022-11-25 22:19:49,235 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:19:49,235 INFO L495 AbstractCegarLoop]: Abstraction has 151 states and 176 transitions. [2022-11-25 22:19:49,236 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:49,236 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 176 transitions. [2022-11-25 22:19:49,236 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-25 22:19:49,236 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:19:49,236 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:19:49,243 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-25 22:19:49,442 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-11-25 22:19:49,442 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:19:49,442 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:19:49,442 INFO L85 PathProgramCache]: Analyzing trace with hash 688632906, now seen corresponding path program 3 times [2022-11-25 22:19:49,443 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:19:49,443 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [197976462] [2022-11-25 22:19:49,443 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:49,443 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:19:49,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:49,983 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:19:49,983 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:19:49,984 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [197976462] [2022-11-25 22:19:49,984 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [197976462] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:19:49,984 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1474327936] [2022-11-25 22:19:49,984 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:19:49,984 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:19:49,984 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:19:49,989 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:19:50,011 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-25 22:19:50,113 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:19:50,114 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:19:50,116 INFO L263 TraceCheckSpWp]: Trace formula consists of 221 conjuncts, 58 conjunts are in the unsatisfiable core [2022-11-25 22:19:50,118 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:19:50,269 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 22:19:50,540 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-25 22:19:50,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 48 treesize of output 56 [2022-11-25 22:19:50,577 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:19:50,578 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:50,579 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 20 [2022-11-25 22:19:50,792 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:50,793 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:19:50,796 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:50,796 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-11-25 22:19:50,800 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:19:50,800 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:19:51,227 INFO L321 Elim1Store]: treesize reduction 16, result has 66.7 percent of original size [2022-11-25 22:19:51,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 71 treesize of output 87 [2022-11-25 22:19:51,240 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:51,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 51 [2022-11-25 22:19:51,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:19:51,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2022-11-25 22:19:51,314 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:51,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 45 treesize of output 55 [2022-11-25 22:19:51,571 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 11 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:19:51,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1474327936] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:19:51,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1068700190] [2022-11-25 22:19:51,573 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:19:51,573 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:19:51,573 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:19:51,573 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:19:51,573 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:19:51,619 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:51,622 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:51,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:19:51,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:51,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:51,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:51,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:51,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:51,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:19:51,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:19:51,980 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:19:51,980 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:19:52,114 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:19:52,117 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:19:52,171 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:19:52,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:19:52,331 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:19:52,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:19:52,414 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:19:52,414 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:19:52,472 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:19:55,472 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6608#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:19:55,472 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:19:55,472 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:19:55,473 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 17, 17] total 40 [2022-11-25 22:19:55,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1252619507] [2022-11-25 22:19:55,473 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:19:55,473 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-11-25 22:19:55,474 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:19:55,474 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-11-25 22:19:55,474 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=261, Invalid=2583, Unknown=18, NotChecked=0, Total=2862 [2022-11-25 22:19:55,475 INFO L87 Difference]: Start difference. First operand 151 states and 176 transitions. Second operand has 40 states, 40 states have (on average 1.575) internal successors, (63), 40 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:57,291 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:19:57,291 INFO L93 Difference]: Finished difference Result 281 states and 316 transitions. [2022-11-25 22:19:57,292 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-25 22:19:57,292 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 1.575) internal successors, (63), 40 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-25 22:19:57,292 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:19:57,293 INFO L225 Difference]: With dead ends: 281 [2022-11-25 22:19:57,293 INFO L226 Difference]: Without dead ends: 193 [2022-11-25 22:19:57,294 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 117 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1475 ImplicationChecksByTransitivity, 5.4s TimeCoverageRelationStatistics Valid=781, Invalid=5207, Unknown=18, NotChecked=0, Total=6006 [2022-11-25 22:19:57,294 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 280 mSDsluCounter, 224 mSDsCounter, 0 mSdLazyCounter, 566 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 280 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 590 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 566 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 22:19:57,294 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [280 Valid, 237 Invalid, 590 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 566 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 22:19:57,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2022-11-25 22:19:57,298 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 183. [2022-11-25 22:19:57,298 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 183 states, 179 states have (on average 1.1843575418994414) internal successors, (212), 182 states have internal predecessors, (212), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:57,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 183 states to 183 states and 212 transitions. [2022-11-25 22:19:57,299 INFO L78 Accepts]: Start accepts. Automaton has 183 states and 212 transitions. Word has length 27 [2022-11-25 22:19:57,299 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:19:57,299 INFO L495 AbstractCegarLoop]: Abstraction has 183 states and 212 transitions. [2022-11-25 22:19:57,300 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 40 states have (on average 1.575) internal successors, (63), 40 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:19:57,300 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 212 transitions. [2022-11-25 22:19:57,300 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-25 22:19:57,300 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:19:57,300 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:19:57,307 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-25 22:19:57,506 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-25 22:19:57,507 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:19:57,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:19:57,507 INFO L85 PathProgramCache]: Analyzing trace with hash 1183895159, now seen corresponding path program 6 times [2022-11-25 22:19:57,507 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:19:57,507 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1055162173] [2022-11-25 22:19:57,508 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:19:57,508 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:19:57,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:19:58,338 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 9 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:58,339 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:19:58,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1055162173] [2022-11-25 22:19:58,339 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1055162173] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:19:58,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [977049302] [2022-11-25 22:19:58,339 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:19:58,339 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:19:58,340 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:19:58,341 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:19:58,350 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-25 22:19:58,526 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:19:58,527 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:19:58,529 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-25 22:19:58,532 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:19:58,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:19:58,980 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:19:58,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:19:59,465 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:19:59,468 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:19:59,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-25 22:19:59,507 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 6 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:19:59,507 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:19:59,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 79 treesize of output 73 [2022-11-25 22:20:00,587 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 6 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:20:00,587 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [977049302] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:20:00,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [39890035] [2022-11-25 22:20:00,589 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:20:00,589 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:20:00,589 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:20:00,589 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:20:00,589 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:20:00,632 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:00,636 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:00,638 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:20:00,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:20:00,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:00,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:00,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:20:00,874 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:20:00,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:20:00,968 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:20:02,930 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7352#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:20:02,930 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:20:02,931 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:20:02,931 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 19, 19] total 50 [2022-11-25 22:20:02,931 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1396535653] [2022-11-25 22:20:02,931 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:20:02,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-25 22:20:02,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:20:02,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-25 22:20:02,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=3254, Unknown=0, NotChecked=0, Total=3422 [2022-11-25 22:20:02,934 INFO L87 Difference]: Start difference. First operand 183 states and 212 transitions. Second operand has 50 states, 50 states have (on average 1.68) internal successors, (84), 50 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:12,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:20:12,786 INFO L93 Difference]: Finished difference Result 592 states and 648 transitions. [2022-11-25 22:20:12,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-11-25 22:20:12,786 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 50 states have (on average 1.68) internal successors, (84), 50 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-25 22:20:12,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:20:12,789 INFO L225 Difference]: With dead ends: 592 [2022-11-25 22:20:12,789 INFO L226 Difference]: Without dead ends: 540 [2022-11-25 22:20:12,791 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 43 SyntacticMatches, 0 SemanticMatches, 107 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2044 ImplicationChecksByTransitivity, 10.8s TimeCoverageRelationStatistics Valid=1118, Invalid=10654, Unknown=0, NotChecked=0, Total=11772 [2022-11-25 22:20:12,792 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 1389 mSDsluCounter, 1723 mSDsCounter, 0 mSdLazyCounter, 4134 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1389 SdHoareTripleChecker+Valid, 1774 SdHoareTripleChecker+Invalid, 4161 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 4134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-11-25 22:20:12,792 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1389 Valid, 1774 Invalid, 4161 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 4134 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2022-11-25 22:20:12,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 540 states. [2022-11-25 22:20:12,799 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 540 to 207. [2022-11-25 22:20:12,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 207 states, 203 states have (on average 1.1773399014778325) internal successors, (239), 206 states have internal predecessors, (239), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:12,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207 states to 207 states and 239 transitions. [2022-11-25 22:20:12,800 INFO L78 Accepts]: Start accepts. Automaton has 207 states and 239 transitions. Word has length 29 [2022-11-25 22:20:12,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:20:12,801 INFO L495 AbstractCegarLoop]: Abstraction has 207 states and 239 transitions. [2022-11-25 22:20:12,801 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 50 states have (on average 1.68) internal successors, (84), 50 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:12,801 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 239 transitions. [2022-11-25 22:20:12,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-25 22:20:12,802 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:20:12,802 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:20:12,811 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-25 22:20:13,009 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-25 22:20:13,009 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:20:13,010 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:20:13,010 INFO L85 PathProgramCache]: Analyzing trace with hash 1651596666, now seen corresponding path program 4 times [2022-11-25 22:20:13,010 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:20:13,010 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1486319684] [2022-11-25 22:20:13,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:20:13,010 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:20:13,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:20:13,380 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:20:13,380 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:20:13,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1486319684] [2022-11-25 22:20:13,380 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1486319684] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:20:13,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [959205705] [2022-11-25 22:20:13,380 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:20:13,380 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:20:13,381 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:20:13,382 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:20:13,417 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-25 22:20:13,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:20:13,518 INFO L263 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-25 22:20:13,520 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:20:13,646 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:20:13,646 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:20:13,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 22:20:13,852 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:20:13,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [959205705] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:20:13,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [655241204] [2022-11-25 22:20:13,854 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:20:13,854 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:20:13,855 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:20:13,855 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:20:13,855 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:20:13,896 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:13,900 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:13,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:20:13,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:20:13,991 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:14,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:14,069 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:20:14,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:14,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:14,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:20:14,233 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:20:14,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:20:14,357 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:20:14,362 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:20:14,417 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:20:14,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:20:14,554 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:20:14,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:20:14,640 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:20:14,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:20:14,690 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:20:17,230 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8449#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:20:17,230 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:20:17,230 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:20:17,230 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9, 9] total 20 [2022-11-25 22:20:17,231 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [581094577] [2022-11-25 22:20:17,231 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:20:17,231 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-11-25 22:20:17,231 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:20:17,232 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-11-25 22:20:17,232 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=1047, Unknown=0, NotChecked=0, Total=1190 [2022-11-25 22:20:17,232 INFO L87 Difference]: Start difference. First operand 207 states and 239 transitions. Second operand has 21 states, 20 states have (on average 2.95) internal successors, (59), 21 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:17,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:20:17,761 INFO L93 Difference]: Finished difference Result 256 states and 282 transitions. [2022-11-25 22:20:17,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-25 22:20:17,762 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 20 states have (on average 2.95) internal successors, (59), 21 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-25 22:20:17,762 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:20:17,763 INFO L225 Difference]: With dead ends: 256 [2022-11-25 22:20:17,764 INFO L226 Difference]: Without dead ends: 256 [2022-11-25 22:20:17,764 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 106 GetRequests, 59 SyntacticMatches, 3 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 522 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=273, Invalid=1797, Unknown=0, NotChecked=0, Total=2070 [2022-11-25 22:20:17,765 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 210 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 296 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 210 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 301 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 296 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 22:20:17,765 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [210 Valid, 114 Invalid, 301 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 296 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 22:20:17,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2022-11-25 22:20:17,770 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 233. [2022-11-25 22:20:17,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 233 states, 229 states have (on average 1.1615720524017468) internal successors, (266), 232 states have internal predecessors, (266), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:17,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 233 states to 233 states and 266 transitions. [2022-11-25 22:20:17,771 INFO L78 Accepts]: Start accepts. Automaton has 233 states and 266 transitions. Word has length 29 [2022-11-25 22:20:17,771 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:20:17,771 INFO L495 AbstractCegarLoop]: Abstraction has 233 states and 266 transitions. [2022-11-25 22:20:17,772 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 20 states have (on average 2.95) internal successors, (59), 21 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:17,772 INFO L276 IsEmpty]: Start isEmpty. Operand 233 states and 266 transitions. [2022-11-25 22:20:17,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-25 22:20:17,772 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:20:17,772 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:20:17,787 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-25 22:20:17,978 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-25 22:20:17,978 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:20:17,978 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:20:17,979 INFO L85 PathProgramCache]: Analyzing trace with hash -382939349, now seen corresponding path program 7 times [2022-11-25 22:20:17,979 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:20:17,979 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [109199195] [2022-11-25 22:20:17,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:20:17,979 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:20:18,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:20:18,955 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 16 proven. 69 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:20:18,955 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:20:18,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [109199195] [2022-11-25 22:20:18,955 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [109199195] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:20:18,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2089767668] [2022-11-25 22:20:18,955 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:20:18,956 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:20:18,956 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:20:18,956 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:20:18,959 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-25 22:20:19,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:20:19,079 INFO L263 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-25 22:20:19,082 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:20:19,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:20:19,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:20:19,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 21 [2022-11-25 22:20:20,121 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:20:20,124 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:20:20,124 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 10 [2022-11-25 22:20:20,167 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 7 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:20:20,168 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:20:20,510 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_583 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_583) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 6 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-25 22:20:20,516 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:20:20,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-25 22:20:20,527 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:20:20,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-25 22:20:20,531 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-25 22:20:21,146 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 7 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:20:21,146 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2089767668] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:20:21,146 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1593077199] [2022-11-25 22:20:21,147 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:20:21,147 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:20:21,148 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:20:21,148 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:20:21,148 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:20:21,184 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:21,187 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:21,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:20:21,226 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:21,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:21,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:21,347 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:20:21,410 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:20:21,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:20:21,506 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:20:24,061 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9220#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:20:24,062 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:20:24,066 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:20:24,068 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 20, 20] total 54 [2022-11-25 22:20:24,069 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1578047579] [2022-11-25 22:20:24,069 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:20:24,070 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-25 22:20:24,070 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:20:24,071 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-25 22:20:24,071 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=180, Invalid=3605, Unknown=1, NotChecked=120, Total=3906 [2022-11-25 22:20:24,072 INFO L87 Difference]: Start difference. First operand 233 states and 266 transitions. Second operand has 54 states, 54 states have (on average 1.7777777777777777) internal successors, (96), 54 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:30,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:20:30,989 INFO L93 Difference]: Finished difference Result 859 states and 935 transitions. [2022-11-25 22:20:30,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-11-25 22:20:30,990 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 1.7777777777777777) internal successors, (96), 54 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-25 22:20:30,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:20:30,992 INFO L225 Difference]: With dead ends: 859 [2022-11-25 22:20:30,993 INFO L226 Difference]: Without dead ends: 805 [2022-11-25 22:20:30,994 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 96 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1445 ImplicationChecksByTransitivity, 8.4s TimeCoverageRelationStatistics Valid=708, Invalid=8607, Unknown=1, NotChecked=190, Total=9506 [2022-11-25 22:20:30,995 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 1512 mSDsluCounter, 2128 mSDsCounter, 0 mSdLazyCounter, 4827 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1512 SdHoareTripleChecker+Valid, 2188 SdHoareTripleChecker+Invalid, 5089 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 4827 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 215 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-11-25 22:20:30,995 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1512 Valid, 2188 Invalid, 5089 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 4827 Invalid, 0 Unknown, 215 Unchecked, 2.9s Time] [2022-11-25 22:20:30,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 805 states. [2022-11-25 22:20:31,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 805 to 274. [2022-11-25 22:20:31,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 270 states have (on average 1.162962962962963) internal successors, (314), 273 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:31,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 314 transitions. [2022-11-25 22:20:31,005 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 314 transitions. Word has length 33 [2022-11-25 22:20:31,005 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:20:31,006 INFO L495 AbstractCegarLoop]: Abstraction has 274 states and 314 transitions. [2022-11-25 22:20:31,006 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 1.7777777777777777) internal successors, (96), 54 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:31,006 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 314 transitions. [2022-11-25 22:20:31,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-25 22:20:31,007 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:20:31,007 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:20:31,017 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-11-25 22:20:31,212 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:20:31,212 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:20:31,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:20:31,213 INFO L85 PathProgramCache]: Analyzing trace with hash 53024798, now seen corresponding path program 5 times [2022-11-25 22:20:31,213 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:20:31,213 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [249711251] [2022-11-25 22:20:31,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:20:31,213 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:20:31,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:20:32,287 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 12 proven. 20 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:20:32,287 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:20:32,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [249711251] [2022-11-25 22:20:32,289 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [249711251] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:20:32,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [420979556] [2022-11-25 22:20:32,289 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:20:32,289 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:20:32,289 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:20:32,290 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:20:32,292 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-25 22:20:32,497 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-25 22:20:32,497 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:20:32,500 INFO L263 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 80 conjunts are in the unsatisfiable core [2022-11-25 22:20:32,502 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:20:32,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:20:32,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:20:32,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 22:20:33,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 22:20:33,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-25 22:20:33,144 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 10 proven. 22 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:20:33,144 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:20:33,361 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:20:33,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 22:20:33,369 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:20:33,369 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 22:20:33,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-25 22:20:33,697 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 13 proven. 19 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:20:33,697 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [420979556] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:20:33,697 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [790415895] [2022-11-25 22:20:33,698 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:20:33,699 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:20:33,699 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:20:33,699 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:20:33,699 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:20:33,741 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:33,745 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:33,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:20:33,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:33,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:33,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:33,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:33,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:33,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:34,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:20:34,071 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:20:34,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:20:34,176 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:20:34,181 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:20:34,236 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:20:34,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:20:34,393 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:20:34,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:20:34,467 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:20:34,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:20:34,510 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:20:37,520 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10670#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:20:37,520 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:20:37,520 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:20:37,520 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 17, 15] total 40 [2022-11-25 22:20:37,520 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1671539342] [2022-11-25 22:20:37,520 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:20:37,521 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-11-25 22:20:37,521 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:20:37,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-11-25 22:20:37,522 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=239, Invalid=2602, Unknown=21, NotChecked=0, Total=2862 [2022-11-25 22:20:37,522 INFO L87 Difference]: Start difference. First operand 274 states and 314 transitions. Second operand has 40 states, 40 states have (on average 2.15) internal successors, (86), 40 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:39,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:20:39,355 INFO L93 Difference]: Finished difference Result 328 states and 368 transitions. [2022-11-25 22:20:39,355 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-25 22:20:39,356 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 2.15) internal successors, (86), 40 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-25 22:20:39,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:20:39,357 INFO L225 Difference]: With dead ends: 328 [2022-11-25 22:20:39,357 INFO L226 Difference]: Without dead ends: 298 [2022-11-25 22:20:39,358 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 68 SyntacticMatches, 1 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1378 ImplicationChecksByTransitivity, 5.6s TimeCoverageRelationStatistics Valid=696, Invalid=4983, Unknown=21, NotChecked=0, Total=5700 [2022-11-25 22:20:39,358 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 323 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 541 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 323 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 561 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 541 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 22:20:39,359 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [323 Valid, 187 Invalid, 561 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 541 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 22:20:39,359 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 298 states. [2022-11-25 22:20:39,363 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 298 to 285. [2022-11-25 22:20:39,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 281 states have (on average 1.1565836298932384) internal successors, (325), 284 states have internal predecessors, (325), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:39,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 325 transitions. [2022-11-25 22:20:39,365 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 325 transitions. Word has length 34 [2022-11-25 22:20:39,365 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:20:39,365 INFO L495 AbstractCegarLoop]: Abstraction has 285 states and 325 transitions. [2022-11-25 22:20:39,365 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 40 states have (on average 2.15) internal successors, (86), 40 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:39,366 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 325 transitions. [2022-11-25 22:20:39,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-25 22:20:39,366 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:20:39,366 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:20:39,380 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-25 22:20:39,577 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:20:39,578 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:20:39,578 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:20:39,578 INFO L85 PathProgramCache]: Analyzing trace with hash -1026267007, now seen corresponding path program 1 times [2022-11-25 22:20:39,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:20:39,579 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [162476105] [2022-11-25 22:20:39,579 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:20:39,579 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:20:39,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:20:40,301 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 17 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:20:40,301 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:20:40,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [162476105] [2022-11-25 22:20:40,301 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [162476105] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:20:40,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1005619142] [2022-11-25 22:20:40,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:20:40,301 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:20:40,301 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:20:40,303 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:20:40,321 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-25 22:20:40,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:20:40,444 INFO L263 TraceCheckSpWp]: Trace formula consists of 249 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-25 22:20:40,447 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:20:40,462 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:40,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-25 22:20:40,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:20:41,205 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 21 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:20:41,205 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:20:42,021 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 21 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:20:42,021 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1005619142] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:20:42,021 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1884134224] [2022-11-25 22:20:42,023 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 22:20:42,023 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:20:42,023 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:20:42,024 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:20:42,024 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:20:42,077 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:42,080 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:42,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:20:42,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:20:42,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:42,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:42,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:42,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:42,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:42,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:20:42,400 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:20:42,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:20:42,568 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:20:42,568 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:20:42,706 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:20:42,707 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:20:42,815 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:20:42,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:20:42,892 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:20:45,922 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11581#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:20:45,922 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:20:45,923 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:20:45,923 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 14, 14] total 41 [2022-11-25 22:20:45,923 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1800033889] [2022-11-25 22:20:45,923 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:20:45,924 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-11-25 22:20:45,924 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:20:45,924 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-11-25 22:20:45,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=217, Invalid=2753, Unknown=0, NotChecked=0, Total=2970 [2022-11-25 22:20:45,925 INFO L87 Difference]: Start difference. First operand 285 states and 325 transitions. Second operand has 42 states, 41 states have (on average 2.292682926829268) internal successors, (94), 42 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:54,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:20:54,870 INFO L93 Difference]: Finished difference Result 619 states and 686 transitions. [2022-11-25 22:20:54,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 86 states. [2022-11-25 22:20:54,870 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 41 states have (on average 2.292682926829268) internal successors, (94), 42 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-25 22:20:54,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:20:54,872 INFO L225 Difference]: With dead ends: 619 [2022-11-25 22:20:54,872 INFO L226 Difference]: Without dead ends: 617 [2022-11-25 22:20:54,874 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 132 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4932 ImplicationChecksByTransitivity, 12.5s TimeCoverageRelationStatistics Valid=2133, Invalid=15689, Unknown=0, NotChecked=0, Total=17822 [2022-11-25 22:20:54,875 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 830 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 887 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 830 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 941 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 887 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-25 22:20:54,875 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [830 Valid, 158 Invalid, 941 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 887 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-25 22:20:54,876 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 617 states. [2022-11-25 22:20:54,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 617 to 292. [2022-11-25 22:20:54,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 288 states have (on average 1.1527777777777777) internal successors, (332), 291 states have internal predecessors, (332), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:54,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 332 transitions. [2022-11-25 22:20:54,885 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 332 transitions. Word has length 34 [2022-11-25 22:20:54,885 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:20:54,885 INFO L495 AbstractCegarLoop]: Abstraction has 292 states and 332 transitions. [2022-11-25 22:20:54,885 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 41 states have (on average 2.292682926829268) internal successors, (94), 42 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:20:54,885 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 332 transitions. [2022-11-25 22:20:54,886 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-25 22:20:54,886 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:20:54,886 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:20:54,901 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-25 22:20:55,093 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31,18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:20:55,093 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:20:55,093 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:20:55,093 INFO L85 PathProgramCache]: Analyzing trace with hash -1026276043, now seen corresponding path program 1 times [2022-11-25 22:20:55,093 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:20:55,093 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1974499529] [2022-11-25 22:20:55,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:20:55,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:20:55,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:20:56,014 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 19 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:20:56,015 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:20:56,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1974499529] [2022-11-25 22:20:56,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1974499529] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:20:56,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [284175102] [2022-11-25 22:20:56,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:20:56,015 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:20:56,015 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:20:56,017 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:20:56,051 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-25 22:20:56,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:20:56,211 INFO L263 TraceCheckSpWp]: Trace formula consists of 262 conjuncts, 67 conjunts are in the unsatisfiable core [2022-11-25 22:20:56,214 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:20:56,276 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:56,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-25 22:20:56,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:20:57,637 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 0 proven. 23 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:20:57,637 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:20:58,911 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:20:58,994 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 0 proven. 23 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:20:58,995 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [284175102] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:20:58,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1596876901] [2022-11-25 22:20:58,996 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:20:58,996 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:20:58,998 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:20:58,998 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:20:58,998 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:20:59,039 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:59,043 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:20:59,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:20:59,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:20:59,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:59,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:59,250 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:20:59,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:59,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:20:59,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:20:59,422 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:20:59,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:20:59,601 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:20:59,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:20:59,691 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:20:59,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:20:59,790 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:20:59,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:20:59,833 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:21:03,874 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12912#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:21:03,874 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:21:03,875 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:21:03,875 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 17, 18] total 49 [2022-11-25 22:21:03,875 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2105134046] [2022-11-25 22:21:03,875 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:21:03,875 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-11-25 22:21:03,875 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:21:03,876 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-11-25 22:21:03,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=395, Invalid=3895, Unknown=0, NotChecked=0, Total=4290 [2022-11-25 22:21:03,876 INFO L87 Difference]: Start difference. First operand 292 states and 332 transitions. Second operand has 51 states, 50 states have (on average 1.92) internal successors, (96), 50 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:09,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:21:09,769 INFO L93 Difference]: Finished difference Result 515 states and 571 transitions. [2022-11-25 22:21:09,776 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-11-25 22:21:09,776 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 50 states have (on average 1.92) internal successors, (96), 50 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-25 22:21:09,776 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:21:09,778 INFO L225 Difference]: With dead ends: 515 [2022-11-25 22:21:09,779 INFO L226 Difference]: Without dead ends: 486 [2022-11-25 22:21:09,780 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3357 ImplicationChecksByTransitivity, 11.2s TimeCoverageRelationStatistics Valid=1845, Invalid=10365, Unknown=0, NotChecked=0, Total=12210 [2022-11-25 22:21:09,781 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 867 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 974 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 867 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 1029 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 974 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-25 22:21:09,781 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [867 Valid, 108 Invalid, 1029 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 974 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-25 22:21:09,782 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 486 states. [2022-11-25 22:21:09,787 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 486 to 317. [2022-11-25 22:21:09,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 317 states, 313 states have (on average 1.1693290734824282) internal successors, (366), 316 states have internal predecessors, (366), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:09,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 366 transitions. [2022-11-25 22:21:09,788 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 366 transitions. Word has length 34 [2022-11-25 22:21:09,789 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:21:09,789 INFO L495 AbstractCegarLoop]: Abstraction has 317 states and 366 transitions. [2022-11-25 22:21:09,789 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 50 states have (on average 1.92) internal successors, (96), 50 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:09,789 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 366 transitions. [2022-11-25 22:21:09,790 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-25 22:21:09,790 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:21:09,790 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:21:09,797 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-25 22:21:09,996 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-11-25 22:21:09,997 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:21:09,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:21:09,997 INFO L85 PathProgramCache]: Analyzing trace with hash 1220287728, now seen corresponding path program 1 times [2022-11-25 22:21:09,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:21:09,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [527263929] [2022-11-25 22:21:09,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:21:09,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:21:10,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:21:10,660 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 18 proven. 55 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-25 22:21:10,660 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:21:10,660 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [527263929] [2022-11-25 22:21:10,660 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [527263929] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:21:10,660 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2076140007] [2022-11-25 22:21:10,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:21:10,661 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:21:10,661 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:21:10,665 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:21:10,670 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-25 22:21:10,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:21:10,822 INFO L263 TraceCheckSpWp]: Trace formula consists of 268 conjuncts, 67 conjunts are in the unsatisfiable core [2022-11-25 22:21:10,825 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:21:10,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:21:11,196 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:21:11,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 22:21:11,593 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-25 22:21:11,596 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 18 proven. 55 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-25 22:21:11,596 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:21:11,820 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:21:11,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-25 22:21:11,829 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:21:11,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 37 [2022-11-25 22:21:11,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:21:12,567 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 18 proven. 55 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-25 22:21:12,568 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2076140007] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:21:12,568 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [452861313] [2022-11-25 22:21:12,569 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-25 22:21:12,569 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:21:12,569 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:21:12,570 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:21:12,570 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:21:12,609 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:12,615 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:12,616 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:21:12,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:21:12,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:12,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:12,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:21:12,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:12,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:12,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:21:12,931 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:21:12,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:21:13,015 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:21:14,828 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14097#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:21:14,828 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:21:14,828 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:21:14,828 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 44 [2022-11-25 22:21:14,828 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1255149141] [2022-11-25 22:21:14,828 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:21:14,829 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-11-25 22:21:14,829 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:21:14,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-11-25 22:21:14,830 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=172, Invalid=2690, Unknown=0, NotChecked=0, Total=2862 [2022-11-25 22:21:14,830 INFO L87 Difference]: Start difference. First operand 317 states and 366 transitions. Second operand has 44 states, 44 states have (on average 1.8181818181818181) internal successors, (80), 44 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:16,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:21:16,434 INFO L93 Difference]: Finished difference Result 599 states and 663 transitions. [2022-11-25 22:21:16,434 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-25 22:21:16,435 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 1.8181818181818181) internal successors, (80), 44 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-25 22:21:16,435 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:21:16,437 INFO L225 Difference]: With dead ends: 599 [2022-11-25 22:21:16,437 INFO L226 Difference]: Without dead ends: 599 [2022-11-25 22:21:16,438 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 135 GetRequests, 68 SyntacticMatches, 1 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 900 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=345, Invalid=4211, Unknown=0, NotChecked=0, Total=4556 [2022-11-25 22:21:16,439 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 457 mSDsluCounter, 1044 mSDsCounter, 0 mSdLazyCounter, 1616 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 457 SdHoareTripleChecker+Valid, 1097 SdHoareTripleChecker+Invalid, 1647 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 1616 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:21:16,439 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [457 Valid, 1097 Invalid, 1647 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 1616 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-25 22:21:16,440 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 599 states. [2022-11-25 22:21:16,446 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 599 to 317. [2022-11-25 22:21:16,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 317 states, 313 states have (on average 1.1693290734824282) internal successors, (366), 316 states have internal predecessors, (366), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:16,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 366 transitions. [2022-11-25 22:21:16,448 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 366 transitions. Word has length 35 [2022-11-25 22:21:16,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:21:16,448 INFO L495 AbstractCegarLoop]: Abstraction has 317 states and 366 transitions. [2022-11-25 22:21:16,448 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 1.8181818181818181) internal successors, (80), 44 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:16,449 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 366 transitions. [2022-11-25 22:21:16,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-25 22:21:16,449 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:21:16,449 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:21:16,457 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2022-11-25 22:21:16,655 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-11-25 22:21:16,656 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:21:16,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:21:16,656 INFO L85 PathProgramCache]: Analyzing trace with hash 851942947, now seen corresponding path program 6 times [2022-11-25 22:21:16,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:21:16,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [829727597] [2022-11-25 22:21:16,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:21:16,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:21:16,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:21:17,805 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 11 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:21:17,805 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:21:17,806 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [829727597] [2022-11-25 22:21:17,806 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [829727597] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:21:17,806 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1735352979] [2022-11-25 22:21:17,806 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:21:17,806 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:21:17,806 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:21:17,807 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:21:17,833 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-25 22:21:18,038 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:21:18,039 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:21:18,042 INFO L263 TraceCheckSpWp]: Trace formula consists of 279 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-25 22:21:18,044 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:21:18,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:21:18,386 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-25 22:21:18,386 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 46 treesize of output 54 [2022-11-25 22:21:18,396 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 22:21:18,416 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:21:18,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 20 [2022-11-25 22:21:18,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-11-25 22:21:18,743 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:21:18,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 11 [2022-11-25 22:21:18,747 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 9 proven. 19 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 22:21:18,747 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:21:18,762 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_831 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_831) |c_ULTIMATE.start_cstrncat_~s2#1.base|) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) 0)) is different from false [2022-11-25 22:21:19,187 INFO L321 Elim1Store]: treesize reduction 16, result has 66.7 percent of original size [2022-11-25 22:21:19,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 71 treesize of output 87 [2022-11-25 22:21:19,200 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:21:19,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 51 [2022-11-25 22:21:19,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:21:19,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2022-11-25 22:21:19,257 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:21:19,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 45 treesize of output 55 [2022-11-25 22:21:19,578 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 14 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 4 not checked. [2022-11-25 22:21:19,578 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1735352979] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:21:19,578 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [690379265] [2022-11-25 22:21:19,579 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:21:19,580 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:21:19,580 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:21:19,580 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:21:19,580 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:21:19,621 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:19,624 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:19,625 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:21:19,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:19,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:19,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:19,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:19,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:19,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:19,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:21:19,956 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:21:19,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:21:20,065 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:21:20,069 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:21:20,124 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:21:20,124 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:21:20,308 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:21:20,308 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:21:20,402 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:21:20,402 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:21:20,451 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:21:23,730 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15310#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:21:23,730 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:21:23,730 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:21:23,730 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 21, 20] total 49 [2022-11-25 22:21:23,731 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1039632534] [2022-11-25 22:21:23,731 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:21:23,731 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-25 22:21:23,731 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:21:23,731 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-25 22:21:23,732 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=309, Invalid=3450, Unknown=27, NotChecked=120, Total=3906 [2022-11-25 22:21:23,732 INFO L87 Difference]: Start difference. First operand 317 states and 366 transitions. Second operand has 49 states, 49 states have (on average 1.5714285714285714) internal successors, (77), 49 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:25,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:21:25,480 INFO L93 Difference]: Finished difference Result 608 states and 686 transitions. [2022-11-25 22:21:25,480 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-25 22:21:25,480 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 1.5714285714285714) internal successors, (77), 49 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-25 22:21:25,480 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:21:25,482 INFO L225 Difference]: With dead ends: 608 [2022-11-25 22:21:25,482 INFO L226 Difference]: Without dead ends: 548 [2022-11-25 22:21:25,483 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 67 SyntacticMatches, 3 SemanticMatches, 80 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 2041 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=612, Invalid=5845, Unknown=27, NotChecked=158, Total=6642 [2022-11-25 22:21:25,483 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 207 mSDsluCounter, 332 mSDsCounter, 0 mSdLazyCounter, 940 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 356 SdHoareTripleChecker+Invalid, 1039 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 940 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 80 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-25 22:21:25,484 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 356 Invalid, 1039 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 940 Invalid, 0 Unknown, 80 Unchecked, 0.7s Time] [2022-11-25 22:21:25,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 548 states. [2022-11-25 22:21:25,492 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 548 to 347. [2022-11-25 22:21:25,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 343 states have (on average 1.1690962099125364) internal successors, (401), 346 states have internal predecessors, (401), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:25,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 401 transitions. [2022-11-25 22:21:25,494 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 401 transitions. Word has length 36 [2022-11-25 22:21:25,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:21:25,495 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 401 transitions. [2022-11-25 22:21:25,496 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 1.5714285714285714) internal successors, (77), 49 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:25,496 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 401 transitions. [2022-11-25 22:21:25,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-25 22:21:25,497 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:21:25,497 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:21:25,510 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-25 22:21:25,710 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-25 22:21:25,710 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:21:25,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:21:25,711 INFO L85 PathProgramCache]: Analyzing trace with hash 359132511, now seen corresponding path program 8 times [2022-11-25 22:21:25,711 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:21:25,711 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [901851803] [2022-11-25 22:21:25,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:21:25,711 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:21:25,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:21:27,119 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 25 proven. 88 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:21:27,119 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:21:27,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [901851803] [2022-11-25 22:21:27,119 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [901851803] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:21:27,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1109610614] [2022-11-25 22:21:27,119 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:21:27,120 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:21:27,120 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:21:27,121 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:21:27,124 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-25 22:21:27,324 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-11-25 22:21:27,324 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:21:27,327 INFO L263 TraceCheckSpWp]: Trace formula consists of 279 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-25 22:21:27,329 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:21:27,336 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:21:27,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:21:27,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 22:21:28,563 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-25 22:21:28,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-25 22:21:28,613 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 8 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:21:28,613 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:21:29,104 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_881 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_881) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 7 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-25 22:21:29,110 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:21:29,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-25 22:21:29,117 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:21:29,118 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-25 22:21:29,407 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 8 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:21:29,407 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1109610614] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:21:29,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [471907831] [2022-11-25 22:21:29,408 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:21:29,408 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:21:29,409 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:21:29,409 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:21:29,409 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:21:29,446 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:29,450 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:29,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:21:29,484 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:21:29,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:29,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:29,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:21:29,681 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:21:29,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:21:29,770 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:21:32,436 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16586#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:21:32,437 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:21:32,437 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:21:32,437 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 22, 22] total 52 [2022-11-25 22:21:32,437 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1216351066] [2022-11-25 22:21:32,437 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:21:32,438 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-11-25 22:21:32,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:21:32,439 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-11-25 22:21:32,439 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=198, Invalid=3345, Unknown=1, NotChecked=116, Total=3660 [2022-11-25 22:21:32,439 INFO L87 Difference]: Start difference. First operand 347 states and 401 transitions. Second operand has 52 states, 52 states have (on average 1.8076923076923077) internal successors, (94), 52 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:39,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:21:39,481 INFO L93 Difference]: Finished difference Result 1088 states and 1190 transitions. [2022-11-25 22:21:39,481 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2022-11-25 22:21:39,481 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 52 states have (on average 1.8076923076923077) internal successors, (94), 52 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-25 22:21:39,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:21:39,486 INFO L225 Difference]: With dead ends: 1088 [2022-11-25 22:21:39,486 INFO L226 Difference]: Without dead ends: 1030 [2022-11-25 22:21:39,487 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 67 SyntacticMatches, 2 SemanticMatches, 98 ConstructedPredicates, 1 IntricatePredicates, 8 DeprecatedPredicates, 1949 ImplicationChecksByTransitivity, 9.2s TimeCoverageRelationStatistics Valid=767, Invalid=8938, Unknown=1, NotChecked=194, Total=9900 [2022-11-25 22:21:39,487 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 1733 mSDsluCounter, 1864 mSDsCounter, 0 mSdLazyCounter, 4275 mSolverCounterSat, 42 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1733 SdHoareTripleChecker+Valid, 1927 SdHoareTripleChecker+Invalid, 4549 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 4275 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 228 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2022-11-25 22:21:39,487 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1733 Valid, 1927 Invalid, 4549 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 4275 Invalid, 4 Unknown, 228 Unchecked, 2.7s Time] [2022-11-25 22:21:39,489 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1030 states. [2022-11-25 22:21:39,502 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1030 to 394. [2022-11-25 22:21:39,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 394 states, 390 states have (on average 1.1717948717948719) internal successors, (457), 393 states have internal predecessors, (457), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:39,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 394 states to 394 states and 457 transitions. [2022-11-25 22:21:39,504 INFO L78 Accepts]: Start accepts. Automaton has 394 states and 457 transitions. Word has length 37 [2022-11-25 22:21:39,504 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:21:39,504 INFO L495 AbstractCegarLoop]: Abstraction has 394 states and 457 transitions. [2022-11-25 22:21:39,504 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 52 states have (on average 1.8076923076923077) internal successors, (94), 52 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:39,504 INFO L276 IsEmpty]: Start isEmpty. Operand 394 states and 457 transitions. [2022-11-25 22:21:39,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-25 22:21:39,505 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:21:39,505 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:21:39,513 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-25 22:21:39,711 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable35,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:21:39,712 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:21:39,712 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:21:39,712 INFO L85 PathProgramCache]: Analyzing trace with hash 1091621299, now seen corresponding path program 7 times [2022-11-25 22:21:39,712 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:21:39,712 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2076569303] [2022-11-25 22:21:39,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:21:39,713 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:21:39,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:21:40,149 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 1 proven. 32 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 22:21:40,149 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:21:40,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2076569303] [2022-11-25 22:21:40,149 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2076569303] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:21:40,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [453421197] [2022-11-25 22:21:40,150 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:21:40,150 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:21:40,150 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:21:40,151 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:21:40,153 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-25 22:21:40,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:21:40,309 INFO L263 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-25 22:21:40,311 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:21:40,462 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 4 proven. 29 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 22:21:40,462 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:21:40,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 22:21:40,713 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 4 proven. 29 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 22:21:40,713 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [453421197] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:21:40,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1015207] [2022-11-25 22:21:40,714 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:21:40,714 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:21:40,715 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:21:40,715 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:21:40,715 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:21:40,751 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:40,755 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:40,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:21:40,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:40,850 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:40,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:40,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:21:40,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:40,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:41,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:21:41,078 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:21:41,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:21:41,211 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:21:41,214 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:21:41,270 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:21:41,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:21:41,386 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:21:41,386 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:21:41,465 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:21:41,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:21:41,501 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:21:44,132 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18402#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:21:44,133 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:21:44,133 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:21:44,133 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 11, 11] total 24 [2022-11-25 22:21:44,133 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1952574968] [2022-11-25 22:21:44,133 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:21:44,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-25 22:21:44,134 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:21:44,134 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-25 22:21:44,134 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=163, Invalid=1319, Unknown=0, NotChecked=0, Total=1482 [2022-11-25 22:21:44,134 INFO L87 Difference]: Start difference. First operand 394 states and 457 transitions. Second operand has 25 states, 24 states have (on average 3.0416666666666665) internal successors, (73), 25 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:44,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:21:44,996 INFO L93 Difference]: Finished difference Result 677 states and 764 transitions. [2022-11-25 22:21:44,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-25 22:21:44,997 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 3.0416666666666665) internal successors, (73), 25 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-25 22:21:44,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:21:44,998 INFO L225 Difference]: With dead ends: 677 [2022-11-25 22:21:44,998 INFO L226 Difference]: Without dead ends: 677 [2022-11-25 22:21:44,998 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 83 SyntacticMatches, 4 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 758 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=378, Invalid=2484, Unknown=0, NotChecked=0, Total=2862 [2022-11-25 22:21:44,999 INFO L413 NwaCegarLoop]: 22 mSDtfsCounter, 336 mSDsluCounter, 220 mSDsCounter, 0 mSdLazyCounter, 647 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 336 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 652 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 647 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 22:21:44,999 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [336 Valid, 242 Invalid, 652 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 647 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 22:21:44,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 677 states. [2022-11-25 22:21:45,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 677 to 491. [2022-11-25 22:21:45,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 491 states, 487 states have (on average 1.188911704312115) internal successors, (579), 490 states have internal predecessors, (579), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:45,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 579 transitions. [2022-11-25 22:21:45,008 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 579 transitions. Word has length 38 [2022-11-25 22:21:45,009 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:21:45,009 INFO L495 AbstractCegarLoop]: Abstraction has 491 states and 579 transitions. [2022-11-25 22:21:45,009 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 3.0416666666666665) internal successors, (73), 25 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:45,009 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 579 transitions. [2022-11-25 22:21:45,010 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-25 22:21:45,010 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:21:45,010 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:21:45,017 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2022-11-25 22:21:45,216 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-25 22:21:45,217 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:21:45,217 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:21:45,217 INFO L85 PathProgramCache]: Analyzing trace with hash 1804734954, now seen corresponding path program 1 times [2022-11-25 22:21:45,217 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:21:45,218 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [868471260] [2022-11-25 22:21:45,218 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:21:45,218 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:21:45,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:21:46,115 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 9 proven. 28 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-25 22:21:46,115 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:21:46,115 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [868471260] [2022-11-25 22:21:46,116 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [868471260] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:21:46,116 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1507802710] [2022-11-25 22:21:46,116 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:21:46,116 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:21:46,116 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:21:46,117 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:21:46,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-25 22:21:46,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:21:46,271 INFO L263 TraceCheckSpWp]: Trace formula consists of 290 conjuncts, 67 conjunts are in the unsatisfiable core [2022-11-25 22:21:46,273 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:21:46,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:21:46,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 22:21:46,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 22:21:46,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 22:21:46,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-25 22:21:46,691 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 9 proven. 19 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-25 22:21:46,692 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:21:46,704 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_990 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_990) |c_ULTIMATE.start_cstrncat_~s2#1.base|) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) 0)) is different from false [2022-11-25 22:21:46,775 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_990 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_990) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~s2#1.offset|)) 0)) is different from false [2022-11-25 22:21:46,792 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:21:46,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 22:21:46,798 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:21:46,798 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 22:21:46,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-25 22:21:47,015 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 9 proven. 11 refuted. 0 times theorem prover too weak. 11 trivial. 8 not checked. [2022-11-25 22:21:47,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1507802710] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:21:47,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1105412546] [2022-11-25 22:21:47,017 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:21:47,017 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:21:47,017 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:21:47,017 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:21:47,018 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:21:47,064 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:47,067 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:47,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:21:47,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:21:47,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:47,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:47,238 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:47,272 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:47,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:47,335 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:21:47,396 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:21:47,396 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:21:47,537 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:21:47,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:21:47,636 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:21:47,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:21:47,719 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:21:47,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:21:47,760 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:21:51,225 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19875#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:21:51,225 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:21:51,225 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:21:51,226 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 15, 15] total 39 [2022-11-25 22:21:51,226 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1416236475] [2022-11-25 22:21:51,226 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:21:51,226 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-11-25 22:21:51,226 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:21:51,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-11-25 22:21:51,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=221, Invalid=2429, Unknown=10, NotChecked=202, Total=2862 [2022-11-25 22:21:51,227 INFO L87 Difference]: Start difference. First operand 491 states and 579 transitions. Second operand has 39 states, 39 states have (on average 2.128205128205128) internal successors, (83), 39 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:52,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:21:52,575 INFO L93 Difference]: Finished difference Result 640 states and 716 transitions. [2022-11-25 22:21:52,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-25 22:21:52,576 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 2.128205128205128) internal successors, (83), 39 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-25 22:21:52,576 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:21:52,578 INFO L225 Difference]: With dead ends: 640 [2022-11-25 22:21:52,578 INFO L226 Difference]: Without dead ends: 535 [2022-11-25 22:21:52,579 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 154 GetRequests, 82 SyntacticMatches, 2 SemanticMatches, 70 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 1391 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=510, Invalid=4318, Unknown=10, NotChecked=274, Total=5112 [2022-11-25 22:21:52,579 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 240 mSDsluCounter, 383 mSDsCounter, 0 mSdLazyCounter, 780 mSolverCounterSat, 13 mSolverCounterUnsat, 22 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 240 SdHoareTripleChecker+Valid, 411 SdHoareTripleChecker+Invalid, 955 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 780 IncrementalHoareTripleChecker+Invalid, 22 IncrementalHoareTripleChecker+Unknown, 140 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 22:21:52,579 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [240 Valid, 411 Invalid, 955 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 780 Invalid, 22 Unknown, 140 Unchecked, 0.5s Time] [2022-11-25 22:21:52,580 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2022-11-25 22:21:52,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 487. [2022-11-25 22:21:52,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 487 states, 483 states have (on average 1.1511387163561078) internal successors, (556), 486 states have internal predecessors, (556), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:52,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 487 states to 487 states and 556 transitions. [2022-11-25 22:21:52,588 INFO L78 Accepts]: Start accepts. Automaton has 487 states and 556 transitions. Word has length 38 [2022-11-25 22:21:52,589 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:21:52,589 INFO L495 AbstractCegarLoop]: Abstraction has 487 states and 556 transitions. [2022-11-25 22:21:52,589 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 2.128205128205128) internal successors, (83), 39 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:21:52,589 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 556 transitions. [2022-11-25 22:21:52,590 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-25 22:21:52,590 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:21:52,590 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:21:52,597 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-25 22:21:52,796 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-25 22:21:52,797 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:21:52,797 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:21:52,797 INFO L85 PathProgramCache]: Analyzing trace with hash 725443149, now seen corresponding path program 2 times [2022-11-25 22:21:52,797 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:21:52,797 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1569076261] [2022-11-25 22:21:52,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:21:52,797 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:21:52,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:21:53,595 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:21:53,595 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:21:53,595 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1569076261] [2022-11-25 22:21:53,595 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1569076261] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:21:53,596 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [508367959] [2022-11-25 22:21:53,596 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:21:53,596 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:21:53,596 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:21:53,597 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:21:53,599 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-25 22:21:53,879 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-25 22:21:53,879 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:21:53,882 INFO L263 TraceCheckSpWp]: Trace formula consists of 273 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-25 22:21:53,884 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:21:53,959 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:53,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-25 22:21:53,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:21:55,103 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 0 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:21:55,103 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:21:56,201 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:21:56,261 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 9 proven. 26 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 22:21:56,261 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [508367959] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:21:56,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1277494168] [2022-11-25 22:21:56,262 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 22:21:56,262 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:21:56,263 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:21:56,263 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:21:56,263 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:21:56,320 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:56,324 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:21:56,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:21:56,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:21:56,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:56,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:56,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:21:56,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:56,535 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:21:56,570 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:21:56,620 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:21:56,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:21:56,786 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:21:56,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:21:56,894 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:21:56,894 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:21:56,980 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:21:56,980 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:21:57,059 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:22:00,553 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21330#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:22:00,553 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:22:00,553 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:22:00,553 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 17] total 53 [2022-11-25 22:22:00,554 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1310527823] [2022-11-25 22:22:00,554 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:22:00,554 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-25 22:22:00,554 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:22:00,555 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-25 22:22:00,555 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=370, Invalid=4186, Unknown=0, NotChecked=0, Total=4556 [2022-11-25 22:22:00,556 INFO L87 Difference]: Start difference. First operand 487 states and 556 transitions. Second operand has 54 states, 53 states have (on average 2.1132075471698113) internal successors, (112), 54 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:22:12,675 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:22:12,675 INFO L93 Difference]: Finished difference Result 808 states and 878 transitions. [2022-11-25 22:22:12,676 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 81 states. [2022-11-25 22:22:12,676 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 53 states have (on average 2.1132075471698113) internal successors, (112), 54 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-25 22:22:12,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:22:12,677 INFO L225 Difference]: With dead ends: 808 [2022-11-25 22:22:12,677 INFO L226 Difference]: Without dead ends: 778 [2022-11-25 22:22:12,678 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 207 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 144 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5468 ImplicationChecksByTransitivity, 15.6s TimeCoverageRelationStatistics Valid=2956, Invalid=18214, Unknown=0, NotChecked=0, Total=21170 [2022-11-25 22:22:12,679 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 1251 mSDsluCounter, 327 mSDsCounter, 0 mSdLazyCounter, 2847 mSolverCounterSat, 137 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1251 SdHoareTripleChecker+Valid, 344 SdHoareTripleChecker+Invalid, 2984 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 137 IncrementalHoareTripleChecker+Valid, 2847 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-25 22:22:12,681 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1251 Valid, 344 Invalid, 2984 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [137 Valid, 2847 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-11-25 22:22:12,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 778 states. [2022-11-25 22:22:12,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 778 to 524. [2022-11-25 22:22:12,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 524 states, 520 states have (on average 1.148076923076923) internal successors, (597), 523 states have internal predecessors, (597), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:22:12,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 524 states to 524 states and 597 transitions. [2022-11-25 22:22:12,691 INFO L78 Accepts]: Start accepts. Automaton has 524 states and 597 transitions. Word has length 38 [2022-11-25 22:22:12,691 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:22:12,691 INFO L495 AbstractCegarLoop]: Abstraction has 524 states and 597 transitions. [2022-11-25 22:22:12,691 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 53 states have (on average 2.1132075471698113) internal successors, (112), 54 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:22:12,691 INFO L276 IsEmpty]: Start isEmpty. Operand 524 states and 597 transitions. [2022-11-25 22:22:12,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-25 22:22:12,692 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:22:12,693 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:22:12,706 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Ended with exit code 0 [2022-11-25 22:22:12,898 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-25 22:22:12,899 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:22:12,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:22:12,899 INFO L85 PathProgramCache]: Analyzing trace with hash -265320173, now seen corresponding path program 9 times [2022-11-25 22:22:12,899 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:22:12,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1068186684] [2022-11-25 22:22:12,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:22:12,900 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:22:12,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:22:14,108 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 36 proven. 109 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:22:14,109 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:22:14,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1068186684] [2022-11-25 22:22:14,109 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1068186684] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:22:14,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [267940929] [2022-11-25 22:22:14,109 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:22:14,109 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:22:14,109 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:22:14,110 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:22:14,113 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-25 22:22:14,364 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:22:14,364 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:22:14,367 INFO L263 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 90 conjunts are in the unsatisfiable core [2022-11-25 22:22:14,370 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:22:14,924 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:22:15,024 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:22:15,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 25 [2022-11-25 22:22:16,351 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:22:16,352 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:22:16,353 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:22:16,354 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:22:16,364 INFO L321 Elim1Store]: treesize reduction 4, result has 66.7 percent of original size [2022-11-25 22:22:16,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 37 treesize of output 21 [2022-11-25 22:22:16,429 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 9 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:22:16,429 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:22:17,252 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:22:17,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 93 treesize of output 83 [2022-11-25 22:22:18,499 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 11 proven. 134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:22:18,500 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [267940929] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:22:18,500 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [406126988] [2022-11-25 22:22:18,501 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:22:18,501 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:22:18,501 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:22:18,502 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:22:18,502 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:22:18,538 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:22:18,543 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:22:18,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:22:18,579 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:22:18,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:22:18,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:22:18,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:22:18,741 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:22:18,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:22:18,815 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:22:21,235 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23142#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:22:21,235 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:22:21,235 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:22:21,235 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 26, 26] total 70 [2022-11-25 22:22:21,236 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [173543232] [2022-11-25 22:22:21,236 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:22:21,236 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 70 states [2022-11-25 22:22:21,236 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:22:21,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 70 interpolants. [2022-11-25 22:22:21,237 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=238, Invalid=5924, Unknown=0, NotChecked=0, Total=6162 [2022-11-25 22:22:21,237 INFO L87 Difference]: Start difference. First operand 524 states and 597 transitions. Second operand has 70 states, 70 states have (on average 1.7142857142857142) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:22:39,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:22:39,883 INFO L93 Difference]: Finished difference Result 1770 states and 1931 transitions. [2022-11-25 22:22:39,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 77 states. [2022-11-25 22:22:39,883 INFO L78 Accepts]: Start accepts. Automaton has has 70 states, 70 states have (on average 1.7142857142857142) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-25 22:22:39,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:22:39,886 INFO L225 Difference]: With dead ends: 1770 [2022-11-25 22:22:39,886 INFO L226 Difference]: Without dead ends: 1694 [2022-11-25 22:22:39,887 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 216 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 151 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4213 ImplicationChecksByTransitivity, 20.1s TimeCoverageRelationStatistics Valid=1848, Invalid=21408, Unknown=0, NotChecked=0, Total=23256 [2022-11-25 22:22:39,887 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 2726 mSDsluCounter, 2846 mSDsCounter, 0 mSdLazyCounter, 6821 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2726 SdHoareTripleChecker+Valid, 2916 SdHoareTripleChecker+Invalid, 6878 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 6821 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.6s IncrementalHoareTripleChecker+Time [2022-11-25 22:22:39,888 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2726 Valid, 2916 Invalid, 6878 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 6821 Invalid, 0 Unknown, 0 Unchecked, 4.6s Time] [2022-11-25 22:22:39,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1694 states. [2022-11-25 22:22:39,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1694 to 603. [2022-11-25 22:22:39,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 599 states have (on average 1.1469115191986645) internal successors, (687), 602 states have internal predecessors, (687), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:22:39,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 687 transitions. [2022-11-25 22:22:39,916 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 687 transitions. Word has length 41 [2022-11-25 22:22:39,917 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:22:39,917 INFO L495 AbstractCegarLoop]: Abstraction has 603 states and 687 transitions. [2022-11-25 22:22:39,917 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 70 states, 70 states have (on average 1.7142857142857142) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:22:39,917 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 687 transitions. [2022-11-25 22:22:39,918 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-25 22:22:39,918 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:22:39,918 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:22:39,925 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-25 22:22:40,125 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-25 22:22:40,125 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:22:40,125 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:22:40,125 INFO L85 PathProgramCache]: Analyzing trace with hash 1742417561, now seen corresponding path program 3 times [2022-11-25 22:22:40,126 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:22:40,126 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [200051218] [2022-11-25 22:22:40,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:22:40,126 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:22:40,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:22:41,123 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 4 proven. 43 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:22:41,123 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:22:41,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [200051218] [2022-11-25 22:22:41,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [200051218] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:22:41,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1726953838] [2022-11-25 22:22:41,124 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:22:41,124 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:22:41,124 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:22:41,125 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:22:41,127 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-25 22:22:41,352 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:22:41,352 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:22:41,355 INFO L263 TraceCheckSpWp]: Trace formula consists of 297 conjuncts, 71 conjunts are in the unsatisfiable core [2022-11-25 22:22:41,357 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:22:41,365 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:22:41,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-25 22:22:41,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:22:42,372 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 0 proven. 47 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:22:42,372 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:22:43,647 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 0 proven. 47 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:22:43,648 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1726953838] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:22:43,648 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1222423362] [2022-11-25 22:22:43,649 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 22:22:43,649 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:22:43,649 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:22:43,650 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:22:43,650 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:22:43,685 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:22:43,689 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:22:43,690 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:22:43,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:22:43,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:22:43,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:22:43,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:22:43,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:22:43,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:22:43,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:22:44,031 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:22:44,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:22:44,166 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:22:44,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:22:44,272 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:22:44,272 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:22:44,355 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:22:44,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:22:44,451 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:22:48,206 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25972#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:22:48,207 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:22:48,207 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:22:48,207 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 18, 18] total 53 [2022-11-25 22:22:48,207 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [317075942] [2022-11-25 22:22:48,207 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:22:48,208 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-25 22:22:48,208 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:22:48,208 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-25 22:22:48,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=273, Invalid=4283, Unknown=0, NotChecked=0, Total=4556 [2022-11-25 22:22:48,209 INFO L87 Difference]: Start difference. First operand 603 states and 687 transitions. Second operand has 54 states, 53 states have (on average 2.2264150943396226) internal successors, (118), 54 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:23:12,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:23:12,633 INFO L93 Difference]: Finished difference Result 1969 states and 2155 transitions. [2022-11-25 22:23:12,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 153 states. [2022-11-25 22:23:12,633 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 53 states have (on average 2.2264150943396226) internal successors, (118), 54 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-25 22:23:12,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:23:12,638 INFO L225 Difference]: With dead ends: 1969 [2022-11-25 22:23:12,638 INFO L226 Difference]: Without dead ends: 1965 [2022-11-25 22:23:12,641 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 212 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14240 ImplicationChecksByTransitivity, 28.4s TimeCoverageRelationStatistics Valid=5989, Invalid=39593, Unknown=0, NotChecked=0, Total=45582 [2022-11-25 22:23:12,642 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 2865 mSDsluCounter, 436 mSDsCounter, 0 mSdLazyCounter, 2277 mSolverCounterSat, 149 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2865 SdHoareTripleChecker+Valid, 453 SdHoareTripleChecker+Invalid, 2426 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 149 IncrementalHoareTripleChecker+Valid, 2277 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-25 22:23:12,642 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2865 Valid, 453 Invalid, 2426 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [149 Valid, 2277 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-11-25 22:23:12,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1965 states. [2022-11-25 22:23:12,655 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1965 to 641. [2022-11-25 22:23:12,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 641 states, 637 states have (on average 1.139717425431711) internal successors, (726), 640 states have internal predecessors, (726), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:23:12,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 641 states to 641 states and 726 transitions. [2022-11-25 22:23:12,658 INFO L78 Accepts]: Start accepts. Automaton has 641 states and 726 transitions. Word has length 42 [2022-11-25 22:23:12,658 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:23:12,658 INFO L495 AbstractCegarLoop]: Abstraction has 641 states and 726 transitions. [2022-11-25 22:23:12,659 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 53 states have (on average 2.2264150943396226) internal successors, (118), 54 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:23:12,659 INFO L276 IsEmpty]: Start isEmpty. Operand 641 states and 726 transitions. [2022-11-25 22:23:12,660 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-25 22:23:12,660 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:23:12,660 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:23:12,674 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-25 22:23:12,866 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:23:12,867 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:23:12,867 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:23:12,867 INFO L85 PathProgramCache]: Analyzing trace with hash 1742408525, now seen corresponding path program 2 times [2022-11-25 22:23:12,867 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:23:12,867 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1812770025] [2022-11-25 22:23:12,867 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:23:12,867 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:23:12,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:23:14,060 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 8 proven. 41 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:23:14,060 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:23:14,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1812770025] [2022-11-25 22:23:14,060 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1812770025] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:23:14,061 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1036151435] [2022-11-25 22:23:14,061 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:23:14,061 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:23:14,061 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:23:14,062 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:23:14,064 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-25 22:23:14,292 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-25 22:23:14,292 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:23:14,295 INFO L263 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 63 conjunts are in the unsatisfiable core [2022-11-25 22:23:14,297 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:23:14,347 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:23:14,347 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-25 22:23:14,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:23:15,932 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 9 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:23:15,932 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:23:17,404 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:23:17,489 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 16 proven. 33 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:23:17,489 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1036151435] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:23:17,489 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1141411667] [2022-11-25 22:23:17,490 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:23:17,491 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:23:17,491 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:23:17,491 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:23:17,491 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:23:17,551 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:23:17,554 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:23:17,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:23:17,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:23:17,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:23:17,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:23:17,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:23:17,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:23:17,799 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:23:17,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:23:17,890 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:23:17,890 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:23:18,024 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:23:18,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:23:18,161 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:23:18,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:23:18,263 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:23:18,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:23:18,300 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:23:23,473 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29192#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:23:23,473 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:23:23,473 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:23:23,474 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 56 [2022-11-25 22:23:23,474 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [156163634] [2022-11-25 22:23:23,474 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:23:23,474 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2022-11-25 22:23:23,474 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:23:23,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2022-11-25 22:23:23,475 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=438, Invalid=4818, Unknown=0, NotChecked=0, Total=5256 [2022-11-25 22:23:23,475 INFO L87 Difference]: Start difference. First operand 641 states and 726 transitions. Second operand has 58 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:23:40,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:23:40,320 INFO L93 Difference]: Finished difference Result 990 states and 1083 transitions. [2022-11-25 22:23:40,321 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-11-25 22:23:40,321 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-25 22:23:40,321 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:23:40,325 INFO L225 Difference]: With dead ends: 990 [2022-11-25 22:23:40,325 INFO L226 Difference]: Without dead ends: 960 [2022-11-25 22:23:40,326 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 71 SyntacticMatches, 0 SemanticMatches, 134 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4544 ImplicationChecksByTransitivity, 22.7s TimeCoverageRelationStatistics Valid=3186, Invalid=15174, Unknown=0, NotChecked=0, Total=18360 [2022-11-25 22:23:40,326 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 1040 mSDsluCounter, 223 mSDsCounter, 0 mSdLazyCounter, 1626 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1040 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 1685 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 1626 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-25 22:23:40,327 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1040 Valid, 237 Invalid, 1685 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 1626 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-11-25 22:23:40,327 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 960 states. [2022-11-25 22:23:40,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 960 to 624. [2022-11-25 22:23:40,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 624 states, 620 states have (on average 1.1451612903225807) internal successors, (710), 623 states have internal predecessors, (710), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:23:40,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 624 states to 624 states and 710 transitions. [2022-11-25 22:23:40,338 INFO L78 Accepts]: Start accepts. Automaton has 624 states and 710 transitions. Word has length 42 [2022-11-25 22:23:40,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:23:40,338 INFO L495 AbstractCegarLoop]: Abstraction has 624 states and 710 transitions. [2022-11-25 22:23:40,338 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:23:40,339 INFO L276 IsEmpty]: Start isEmpty. Operand 624 states and 710 transitions. [2022-11-25 22:23:40,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-25 22:23:40,340 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:23:40,340 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:23:40,347 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-25 22:23:40,547 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:23:40,547 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:23:40,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:23:40,547 INFO L85 PathProgramCache]: Analyzing trace with hash -1017749627, now seen corresponding path program 8 times [2022-11-25 22:23:40,548 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:23:40,548 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1623600388] [2022-11-25 22:23:40,548 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:23:40,548 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:23:40,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:23:42,344 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 16 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:23:42,344 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:23:42,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1623600388] [2022-11-25 22:23:42,345 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1623600388] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:23:42,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1264575494] [2022-11-25 22:23:42,345 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:23:42,345 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:23:42,345 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:23:42,346 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:23:42,349 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-25 22:23:42,720 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-25 22:23:42,720 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:23:42,725 INFO L263 TraceCheckSpWp]: Trace formula consists of 324 conjuncts, 108 conjunts are in the unsatisfiable core [2022-11-25 22:23:42,729 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:23:42,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:23:43,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:23:43,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 22:23:43,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 22:23:43,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 22:23:44,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-25 22:23:44,023 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 12 proven. 48 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:23:44,023 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:23:44,149 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1265 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1265) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 1)) 0)) is different from false [2022-11-25 22:23:44,169 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1265 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1265) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~s2#1.offset|)) 0)) is different from false [2022-11-25 22:23:44,273 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:23:44,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 22:23:44,281 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:23:44,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 22:23:44,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-25 22:23:44,684 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 12 proven. 14 refuted. 0 times theorem prover too weak. 9 trivial. 25 not checked. [2022-11-25 22:23:44,684 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1264575494] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:23:44,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1034976812] [2022-11-25 22:23:44,687 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:23:44,687 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:23:44,687 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:23:44,687 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:23:44,687 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:23:44,721 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:23:44,724 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:23:44,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:23:44,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:23:44,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:23:44,875 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:23:44,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:23:44,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:23:45,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:23:45,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:23:45,120 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:23:45,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:23:45,242 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:23:45,246 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:23:45,304 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:23:45,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:23:45,419 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:23:45,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:23:45,509 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:23:45,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:23:45,576 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:23:49,019 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '31251#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:23:49,019 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:23:49,019 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:23:49,019 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 23, 17] total 52 [2022-11-25 22:23:49,019 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1298250182] [2022-11-25 22:23:49,019 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:23:49,020 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-11-25 22:23:49,020 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:23:49,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-11-25 22:23:49,021 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=255, Invalid=3768, Unknown=17, NotChecked=250, Total=4290 [2022-11-25 22:23:49,021 INFO L87 Difference]: Start difference. First operand 624 states and 710 transitions. Second operand has 52 states, 52 states have (on average 2.0961538461538463) internal successors, (109), 52 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:23:56,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:23:56,963 INFO L93 Difference]: Finished difference Result 1256 states and 1364 transitions. [2022-11-25 22:23:56,963 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 93 states. [2022-11-25 22:23:56,963 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 52 states have (on average 2.0961538461538463) internal successors, (109), 52 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-25 22:23:56,963 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:23:56,965 INFO L225 Difference]: With dead ends: 1256 [2022-11-25 22:23:56,965 INFO L226 Difference]: Without dead ends: 844 [2022-11-25 22:23:56,966 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 238 GetRequests, 89 SyntacticMatches, 2 SemanticMatches, 147 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 6281 ImplicationChecksByTransitivity, 12.2s TimeCoverageRelationStatistics Valid=1696, Invalid=19753, Unknown=21, NotChecked=582, Total=22052 [2022-11-25 22:23:56,967 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 953 mSDsluCounter, 684 mSDsCounter, 0 mSdLazyCounter, 1688 mSolverCounterSat, 69 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 953 SdHoareTripleChecker+Valid, 720 SdHoareTripleChecker+Invalid, 2015 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 69 IncrementalHoareTripleChecker+Valid, 1688 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 253 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:23:56,967 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [953 Valid, 720 Invalid, 2015 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [69 Valid, 1688 Invalid, 5 Unknown, 253 Unchecked, 1.1s Time] [2022-11-25 22:23:56,968 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 844 states. [2022-11-25 22:23:56,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 844 to 727. [2022-11-25 22:23:56,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 727 states, 723 states have (on average 1.1383125864453665) internal successors, (823), 726 states have internal predecessors, (823), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:23:56,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 727 states to 727 states and 823 transitions. [2022-11-25 22:23:56,978 INFO L78 Accepts]: Start accepts. Automaton has 727 states and 823 transitions. Word has length 43 [2022-11-25 22:23:56,978 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:23:56,978 INFO L495 AbstractCegarLoop]: Abstraction has 727 states and 823 transitions. [2022-11-25 22:23:56,978 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 52 states have (on average 2.0961538461538463) internal successors, (109), 52 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:23:56,978 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 823 transitions. [2022-11-25 22:23:56,980 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-25 22:23:56,980 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:23:56,980 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:23:56,990 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-25 22:23:57,186 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable42,29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:23:57,186 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:23:57,187 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:23:57,187 INFO L85 PathProgramCache]: Analyzing trace with hash 1530462791, now seen corresponding path program 10 times [2022-11-25 22:23:57,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:23:57,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1415489722] [2022-11-25 22:23:57,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:23:57,187 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:23:57,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:23:58,701 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 49 proven. 132 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:23:58,701 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:23:58,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1415489722] [2022-11-25 22:23:58,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1415489722] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:23:58,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [688565701] [2022-11-25 22:23:58,702 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:23:58,702 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:23:58,702 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:23:58,703 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:23:58,705 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-25 22:23:58,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:23:58,888 INFO L263 TraceCheckSpWp]: Trace formula consists of 327 conjuncts, 87 conjunts are in the unsatisfiable core [2022-11-25 22:23:58,891 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:23:58,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:23:59,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:23:59,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 22:24:00,627 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-25 22:24:00,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-25 22:24:00,683 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 10 proven. 171 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:24:00,683 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:24:01,385 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1324 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1324) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 9 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-25 22:24:01,392 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:24:01,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-25 22:24:01,398 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:24:01,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-25 22:24:01,723 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 10 proven. 171 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:24:01,724 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [688565701] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:24:01,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1406309249] [2022-11-25 22:24:01,725 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:24:01,726 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:24:01,726 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:24:01,726 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:24:01,726 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:24:01,765 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:24:01,768 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:24:01,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:24:01,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:01,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:01,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:01,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:24:01,991 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:24:01,991 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:24:02,073 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:24:04,771 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '33741#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:24:04,771 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:24:04,771 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:24:04,771 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 26, 26] total 62 [2022-11-25 22:24:04,771 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [482536416] [2022-11-25 22:24:04,771 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:24:04,772 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-25 22:24:04,772 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:24:04,773 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-25 22:24:04,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=217, Invalid=4616, Unknown=1, NotChecked=136, Total=4970 [2022-11-25 22:24:04,773 INFO L87 Difference]: Start difference. First operand 727 states and 823 transitions. Second operand has 62 states, 62 states have (on average 1.8387096774193548) internal successors, (114), 62 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:24:16,844 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:24:16,844 INFO L93 Difference]: Finished difference Result 2159 states and 2364 transitions. [2022-11-25 22:24:16,845 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-11-25 22:24:16,845 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 62 states have (on average 1.8387096774193548) internal successors, (114), 62 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-25 22:24:16,845 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:24:16,850 INFO L225 Difference]: With dead ends: 2159 [2022-11-25 22:24:16,850 INFO L226 Difference]: Without dead ends: 2073 [2022-11-25 22:24:16,851 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 85 SyntacticMatches, 2 SemanticMatches, 117 ConstructedPredicates, 1 IntricatePredicates, 10 DeprecatedPredicates, 2847 ImplicationChecksByTransitivity, 12.8s TimeCoverageRelationStatistics Valid=1002, Invalid=12807, Unknown=1, NotChecked=232, Total=14042 [2022-11-25 22:24:16,851 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 2320 mSDsluCounter, 2695 mSDsCounter, 0 mSdLazyCounter, 6294 mSolverCounterSat, 52 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2320 SdHoareTripleChecker+Valid, 2776 SdHoareTripleChecker+Invalid, 6642 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 6294 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 294 IncrementalHoareTripleChecker+Unchecked, 4.9s IncrementalHoareTripleChecker+Time [2022-11-25 22:24:16,851 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2320 Valid, 2776 Invalid, 6642 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 6294 Invalid, 2 Unknown, 294 Unchecked, 4.9s Time] [2022-11-25 22:24:16,853 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2073 states. [2022-11-25 22:24:16,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2073 to 816. [2022-11-25 22:24:16,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 816 states, 812 states have (on average 1.1391625615763548) internal successors, (925), 815 states have internal predecessors, (925), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:24:16,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 816 states to 816 states and 925 transitions. [2022-11-25 22:24:16,883 INFO L78 Accepts]: Start accepts. Automaton has 816 states and 925 transitions. Word has length 45 [2022-11-25 22:24:16,884 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:24:16,884 INFO L495 AbstractCegarLoop]: Abstraction has 816 states and 925 transitions. [2022-11-25 22:24:16,884 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 62 states have (on average 1.8387096774193548) internal successors, (114), 62 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:24:16,884 INFO L276 IsEmpty]: Start isEmpty. Operand 816 states and 925 transitions. [2022-11-25 22:24:16,886 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-25 22:24:16,886 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:24:16,886 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:24:16,895 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-25 22:24:17,093 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable43,30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:24:17,093 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:24:17,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:24:17,094 INFO L85 PathProgramCache]: Analyzing trace with hash 1691470169, now seen corresponding path program 3 times [2022-11-25 22:24:17,094 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:24:17,094 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1462769530] [2022-11-25 22:24:17,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:24:17,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:24:17,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:24:18,150 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 10 proven. 38 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 22:24:18,151 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:24:18,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1462769530] [2022-11-25 22:24:18,151 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1462769530] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:24:18,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1155601275] [2022-11-25 22:24:18,151 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:24:18,151 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:24:18,151 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:24:18,153 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:24:18,177 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-25 22:24:18,397 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:24:18,398 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:24:18,401 INFO L263 TraceCheckSpWp]: Trace formula consists of 331 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-25 22:24:18,403 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:24:18,469 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-25 22:24:18,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-25 22:24:18,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:24:20,349 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 4 proven. 44 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 22:24:20,349 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:24:22,075 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:24:22,164 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 22:24:22,164 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1155601275] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:24:22,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1059503183] [2022-11-25 22:24:22,166 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:24:22,166 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:24:22,166 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:24:22,166 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:24:22,166 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:24:22,203 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:24:22,211 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:24:22,212 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:24:22,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:22,301 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:22,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:22,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:24:22,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:22,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:22,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:24:22,541 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:24:22,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:24:22,684 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:24:22,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:24:22,777 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:24:22,777 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:24:22,866 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:24:22,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:24:22,912 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:24:27,211 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '37144#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:24:27,211 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:24:27,211 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:24:27,211 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 20] total 57 [2022-11-25 22:24:27,211 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1195364193] [2022-11-25 22:24:27,211 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:24:27,212 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2022-11-25 22:24:27,212 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:24:27,212 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2022-11-25 22:24:27,213 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=570, Invalid=4832, Unknown=0, NotChecked=0, Total=5402 [2022-11-25 22:24:27,213 INFO L87 Difference]: Start difference. First operand 816 states and 925 transitions. Second operand has 59 states, 58 states have (on average 2.1206896551724137) internal successors, (123), 58 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:24:33,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:24:33,123 INFO L93 Difference]: Finished difference Result 1126 states and 1242 transitions. [2022-11-25 22:24:33,124 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-11-25 22:24:33,124 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 58 states have (on average 2.1206896551724137) internal successors, (123), 58 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-25 22:24:33,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:24:33,129 INFO L225 Difference]: With dead ends: 1126 [2022-11-25 22:24:33,129 INFO L226 Difference]: Without dead ends: 1090 [2022-11-25 22:24:33,129 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 77 SyntacticMatches, 2 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3347 ImplicationChecksByTransitivity, 12.3s TimeCoverageRelationStatistics Valid=1864, Invalid=10126, Unknown=0, NotChecked=0, Total=11990 [2022-11-25 22:24:33,130 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 409 mSDsluCounter, 90 mSDsCounter, 0 mSdLazyCounter, 1020 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 409 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 1060 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 1020 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-25 22:24:33,130 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [409 Valid, 96 Invalid, 1060 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 1020 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-25 22:24:33,131 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1090 states. [2022-11-25 22:24:33,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1090 to 764. [2022-11-25 22:24:33,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 764 states, 760 states have (on average 1.1460526315789474) internal successors, (871), 763 states have internal predecessors, (871), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:24:33,141 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 764 states to 764 states and 871 transitions. [2022-11-25 22:24:33,141 INFO L78 Accepts]: Start accepts. Automaton has 764 states and 871 transitions. Word has length 45 [2022-11-25 22:24:33,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:24:33,142 INFO L495 AbstractCegarLoop]: Abstraction has 764 states and 871 transitions. [2022-11-25 22:24:33,142 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 58 states have (on average 2.1206896551724137) internal successors, (123), 58 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:24:33,142 INFO L276 IsEmpty]: Start isEmpty. Operand 764 states and 871 transitions. [2022-11-25 22:24:33,143 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-25 22:24:33,144 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:24:33,144 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:24:33,153 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Ended with exit code 0 [2022-11-25 22:24:33,350 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-11-25 22:24:33,350 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:24:33,351 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:24:33,351 INFO L85 PathProgramCache]: Analyzing trace with hash 1203531109, now seen corresponding path program 4 times [2022-11-25 22:24:33,351 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:24:33,351 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1278619647] [2022-11-25 22:24:33,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:24:33,351 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:24:33,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:24:34,288 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 4 proven. 62 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:24:34,289 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:24:34,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1278619647] [2022-11-25 22:24:34,289 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1278619647] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:24:34,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2063605543] [2022-11-25 22:24:34,289 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:24:34,289 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:24:34,289 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:24:34,290 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:24:34,292 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-25 22:24:34,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:24:34,495 INFO L263 TraceCheckSpWp]: Trace formula consists of 321 conjuncts, 79 conjunts are in the unsatisfiable core [2022-11-25 22:24:34,497 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:24:34,511 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:24:34,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-25 22:24:34,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:24:35,879 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 0 proven. 66 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:24:35,879 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:24:37,543 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 0 proven. 66 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:24:37,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2063605543] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:24:37,543 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [857885722] [2022-11-25 22:24:37,544 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 22:24:37,544 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:24:37,544 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:24:37,545 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:24:37,545 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:24:37,597 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:24:37,601 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:24:37,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:24:37,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:37,700 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:37,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:37,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:37,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:37,861 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:24:37,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:24:37,962 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:24:37,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:24:38,122 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:24:38,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:24:38,247 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:24:38,248 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:24:38,330 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:24:38,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:24:38,431 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:24:42,696 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '39451#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:24:42,696 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:24:42,697 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:24:42,697 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 20, 20] total 59 [2022-11-25 22:24:42,697 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1971123304] [2022-11-25 22:24:42,697 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:24:42,697 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 60 states [2022-11-25 22:24:42,697 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:24:42,697 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 60 interpolants. [2022-11-25 22:24:42,698 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=304, Invalid=5098, Unknown=0, NotChecked=0, Total=5402 [2022-11-25 22:24:42,698 INFO L87 Difference]: Start difference. First operand 764 states and 871 transitions. Second operand has 60 states, 59 states have (on average 2.2033898305084745) internal successors, (130), 60 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:25:19,332 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:25:19,333 INFO L93 Difference]: Finished difference Result 2741 states and 3025 transitions. [2022-11-25 22:25:19,333 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 189 states. [2022-11-25 22:25:19,333 INFO L78 Accepts]: Start accepts. Automaton has has 60 states, 59 states have (on average 2.2033898305084745) internal successors, (130), 60 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2022-11-25 22:25:19,333 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:25:19,339 INFO L225 Difference]: With dead ends: 2741 [2022-11-25 22:25:19,339 INFO L226 Difference]: Without dead ends: 2711 [2022-11-25 22:25:19,341 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 339 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 254 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21324 ImplicationChecksByTransitivity, 41.1s TimeCoverageRelationStatistics Valid=8456, Invalid=56824, Unknown=0, NotChecked=0, Total=65280 [2022-11-25 22:25:19,342 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 3952 mSDsluCounter, 577 mSDsCounter, 0 mSdLazyCounter, 3016 mSolverCounterSat, 133 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3952 SdHoareTripleChecker+Valid, 596 SdHoareTripleChecker+Invalid, 3149 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 133 IncrementalHoareTripleChecker+Valid, 3016 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-25 22:25:19,342 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3952 Valid, 596 Invalid, 3149 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [133 Valid, 3016 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-11-25 22:25:19,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2711 states. [2022-11-25 22:25:19,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2711 to 749. [2022-11-25 22:25:19,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 749 states, 745 states have (on average 1.1449664429530202) internal successors, (853), 748 states have internal predecessors, (853), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:25:19,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 749 states to 749 states and 853 transitions. [2022-11-25 22:25:19,356 INFO L78 Accepts]: Start accepts. Automaton has 749 states and 853 transitions. Word has length 46 [2022-11-25 22:25:19,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:25:19,357 INFO L495 AbstractCegarLoop]: Abstraction has 749 states and 853 transitions. [2022-11-25 22:25:19,357 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 60 states, 59 states have (on average 2.2033898305084745) internal successors, (130), 60 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:25:19,357 INFO L276 IsEmpty]: Start isEmpty. Operand 749 states and 853 transitions. [2022-11-25 22:25:19,358 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-25 22:25:19,358 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:25:19,359 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:25:19,370 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-25 22:25:19,570 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-11-25 22:25:19,570 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:25:19,571 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:25:19,571 INFO L85 PathProgramCache]: Analyzing trace with hash -1338966320, now seen corresponding path program 9 times [2022-11-25 22:25:19,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:25:19,571 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1837863957] [2022-11-25 22:25:19,571 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:25:19,571 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:25:19,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:25:20,070 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 4 proven. 54 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 22:25:20,070 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:25:20,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1837863957] [2022-11-25 22:25:20,070 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1837863957] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:25:20,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1467908684] [2022-11-25 22:25:20,071 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:25:20,071 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:25:20,071 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:25:20,072 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:25:20,074 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-25 22:25:20,398 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:25:20,398 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:25:20,401 INFO L263 TraceCheckSpWp]: Trace formula consists of 350 conjuncts, 52 conjunts are in the unsatisfiable core [2022-11-25 22:25:20,404 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:25:20,414 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 22:25:20,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 22:25:20,600 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 9 proven. 49 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 22:25:20,600 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:25:21,011 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 9 proven. 49 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 22:25:21,011 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1467908684] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:25:21,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [578643746] [2022-11-25 22:25:21,013 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:25:21,013 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:25:21,013 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:25:21,013 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:25:21,013 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:25:21,071 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:25:21,075 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:25:21,076 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:25:21,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:25:21,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:25:21,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:25:21,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:25:21,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:25:21,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:25:21,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:25:21,419 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:25:21,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:25:21,553 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:25:21,558 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:25:21,615 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:25:21,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:25:21,758 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:25:21,758 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:25:21,838 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:25:21,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:25:21,872 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:25:24,859 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '43629#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:25:24,859 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:25:24,859 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:25:24,859 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 13, 13] total 33 [2022-11-25 22:25:24,859 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [430868406] [2022-11-25 22:25:24,860 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:25:24,860 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-25 22:25:24,860 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:25:24,861 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-25 22:25:24,861 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=249, Invalid=2007, Unknown=0, NotChecked=0, Total=2256 [2022-11-25 22:25:24,861 INFO L87 Difference]: Start difference. First operand 749 states and 853 transitions. Second operand has 34 states, 33 states have (on average 2.9696969696969697) internal successors, (98), 34 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:25:25,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:25:25,877 INFO L93 Difference]: Finished difference Result 882 states and 975 transitions. [2022-11-25 22:25:25,878 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-25 22:25:25,878 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 33 states have (on average 2.9696969696969697) internal successors, (98), 34 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-25 22:25:25,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:25:25,880 INFO L225 Difference]: With dead ends: 882 [2022-11-25 22:25:25,881 INFO L226 Difference]: Without dead ends: 882 [2022-11-25 22:25:25,881 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 107 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1083 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=650, Invalid=3772, Unknown=0, NotChecked=0, Total=4422 [2022-11-25 22:25:25,882 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 334 mSDsluCounter, 333 mSDsCounter, 0 mSdLazyCounter, 832 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 369 SdHoareTripleChecker+Invalid, 838 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 832 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 22:25:25,882 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [334 Valid, 369 Invalid, 838 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 832 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-25 22:25:25,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 882 states. [2022-11-25 22:25:25,891 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 882 to 800. [2022-11-25 22:25:25,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 800 states, 796 states have (on average 1.1369346733668342) internal successors, (905), 799 states have internal predecessors, (905), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:25:25,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 800 states to 800 states and 905 transitions. [2022-11-25 22:25:25,894 INFO L78 Accepts]: Start accepts. Automaton has 800 states and 905 transitions. Word has length 47 [2022-11-25 22:25:25,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:25:25,895 INFO L495 AbstractCegarLoop]: Abstraction has 800 states and 905 transitions. [2022-11-25 22:25:25,895 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 33 states have (on average 2.9696969696969697) internal successors, (98), 34 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:25:25,895 INFO L276 IsEmpty]: Start isEmpty. Operand 800 states and 905 transitions. [2022-11-25 22:25:25,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-25 22:25:25,897 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:25:25,897 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 10, 10, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:25:25,909 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-11-25 22:25:26,104 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable46,33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:25:26,104 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:25:26,105 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:25:26,105 INFO L85 PathProgramCache]: Analyzing trace with hash -1828603653, now seen corresponding path program 11 times [2022-11-25 22:25:26,105 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:25:26,105 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [510140079] [2022-11-25 22:25:26,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:25:26,105 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:25:26,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:25:27,404 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 64 proven. 157 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:25:27,404 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:25:27,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [510140079] [2022-11-25 22:25:27,404 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [510140079] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:25:27,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1782028720] [2022-11-25 22:25:27,405 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:25:27,405 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:25:27,405 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:25:27,406 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:25:27,408 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-25 22:25:27,753 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 12 check-sat command(s) [2022-11-25 22:25:27,753 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:25:27,757 INFO L263 TraceCheckSpWp]: Trace formula consists of 351 conjuncts, 91 conjunts are in the unsatisfiable core [2022-11-25 22:25:27,760 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:25:27,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:25:28,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:25:28,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 22:25:29,818 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-25 22:25:29,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-25 22:25:29,880 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 11 proven. 210 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:25:29,881 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:25:30,744 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1570 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1570) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 10 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-25 22:25:30,749 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:25:30,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-25 22:25:30,756 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:25:30,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-25 22:25:31,129 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 11 proven. 210 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:25:31,130 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1782028720] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:25:31,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1540372760] [2022-11-25 22:25:31,131 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:25:31,131 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:25:31,131 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:25:31,131 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:25:31,131 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:25:31,164 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:25:31,168 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:25:31,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:25:31,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:25:31,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:25:31,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:25:31,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:25:31,386 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:25:31,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:25:31,476 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:25:34,484 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '45718#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:25:34,484 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:25:34,485 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:25:34,485 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 28, 28] total 67 [2022-11-25 22:25:34,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1178872471] [2022-11-25 22:25:34,485 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:25:34,485 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 67 states [2022-11-25 22:25:34,485 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:25:34,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 67 interpolants. [2022-11-25 22:25:34,486 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=237, Invalid=5316, Unknown=1, NotChecked=146, Total=5700 [2022-11-25 22:25:34,487 INFO L87 Difference]: Start difference. First operand 800 states and 905 transitions. Second operand has 67 states, 67 states have (on average 1.8507462686567164) internal successors, (124), 67 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:25:45,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:25:45,874 INFO L93 Difference]: Finished difference Result 2557 states and 2795 transitions. [2022-11-25 22:25:45,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2022-11-25 22:25:45,875 INFO L78 Accepts]: Start accepts. Automaton has has 67 states, 67 states have (on average 1.8507462686567164) internal successors, (124), 67 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-25 22:25:45,875 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:25:45,880 INFO L225 Difference]: With dead ends: 2557 [2022-11-25 22:25:45,880 INFO L226 Difference]: Without dead ends: 2467 [2022-11-25 22:25:45,881 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 221 GetRequests, 94 SyntacticMatches, 2 SemanticMatches, 125 ConstructedPredicates, 1 IntricatePredicates, 11 DeprecatedPredicates, 3261 ImplicationChecksByTransitivity, 12.7s TimeCoverageRelationStatistics Valid=1085, Invalid=14668, Unknown=1, NotChecked=248, Total=16002 [2022-11-25 22:25:45,881 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 1961 mSDsluCounter, 3136 mSDsCounter, 0 mSdLazyCounter, 7347 mSolverCounterSat, 57 mSolverCounterUnsat, 25 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1961 SdHoareTripleChecker+Valid, 3220 SdHoareTripleChecker+Invalid, 7738 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 7347 IncrementalHoareTripleChecker+Invalid, 25 IncrementalHoareTripleChecker+Unknown, 309 IncrementalHoareTripleChecker+Unchecked, 5.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:25:45,882 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1961 Valid, 3220 Invalid, 7738 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 7347 Invalid, 25 Unknown, 309 Unchecked, 5.0s Time] [2022-11-25 22:25:45,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2467 states. [2022-11-25 22:25:45,893 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2467 to 899. [2022-11-25 22:25:45,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 899 states, 895 states have (on average 1.1363128491620111) internal successors, (1017), 898 states have internal predecessors, (1017), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:25:45,895 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 899 states to 899 states and 1017 transitions. [2022-11-25 22:25:45,895 INFO L78 Accepts]: Start accepts. Automaton has 899 states and 1017 transitions. Word has length 49 [2022-11-25 22:25:45,895 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:25:45,895 INFO L495 AbstractCegarLoop]: Abstraction has 899 states and 1017 transitions. [2022-11-25 22:25:45,895 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 67 states, 67 states have (on average 1.8507462686567164) internal successors, (124), 67 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:25:45,895 INFO L276 IsEmpty]: Start isEmpty. Operand 899 states and 1017 transitions. [2022-11-25 22:25:45,897 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-25 22:25:45,897 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:25:45,897 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:25:45,906 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-25 22:25:46,104 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-11-25 22:25:46,105 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:25:46,105 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:25:46,105 INFO L85 PathProgramCache]: Analyzing trace with hash 1915207345, now seen corresponding path program 5 times [2022-11-25 22:25:46,105 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:25:46,105 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1770624530] [2022-11-25 22:25:46,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:25:46,105 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:25:46,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:25:47,355 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 4 proven. 85 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:25:47,355 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:25:47,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1770624530] [2022-11-25 22:25:47,355 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1770624530] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:25:47,356 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1505861476] [2022-11-25 22:25:47,356 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:25:47,356 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:25:47,356 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:25:47,357 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:25:47,361 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-25 22:25:47,783 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-25 22:25:47,783 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:25:47,787 INFO L263 TraceCheckSpWp]: Trace formula consists of 345 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-25 22:25:47,792 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:25:47,802 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:25:47,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-25 22:25:47,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:25:49,501 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 89 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:25:49,501 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:25:51,483 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 89 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:25:51,483 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1505861476] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:25:51,483 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [490623262] [2022-11-25 22:25:51,484 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 22:25:51,484 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:25:51,484 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:25:51,485 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:25:51,485 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:25:51,526 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:25:51,531 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:25:51,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:25:51,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:25:51,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:25:51,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:25:51,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:25:51,766 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:25:51,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:25:51,837 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:25:51,917 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:25:51,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:25:52,100 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:25:52,101 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:25:52,227 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:25:52,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:25:52,342 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:25:52,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:25:52,430 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:25:56,511 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '49644#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:25:56,511 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:25:56,511 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:25:56,511 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 22, 22] total 64 [2022-11-25 22:25:56,511 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [628709344] [2022-11-25 22:25:56,511 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:25:56,512 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 65 states [2022-11-25 22:25:56,512 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:25:56,512 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 65 interpolants. [2022-11-25 22:25:56,513 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=471, Invalid=5691, Unknown=0, NotChecked=0, Total=6162 [2022-11-25 22:25:56,513 INFO L87 Difference]: Start difference. First operand 899 states and 1017 transitions. Second operand has 65 states, 64 states have (on average 2.1875) internal successors, (140), 65 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:27:10,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:27:10,123 INFO L93 Difference]: Finished difference Result 3909 states and 4286 transitions. [2022-11-25 22:27:10,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 352 states. [2022-11-25 22:27:10,123 INFO L78 Accepts]: Start accepts. Automaton has has 65 states, 64 states have (on average 2.1875) internal successors, (140), 65 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-25 22:27:10,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:27:10,132 INFO L225 Difference]: With dead ends: 3909 [2022-11-25 22:27:10,132 INFO L226 Difference]: Without dead ends: 3901 [2022-11-25 22:27:10,140 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 514 GetRequests, 93 SyntacticMatches, 1 SemanticMatches, 420 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 74082 ImplicationChecksByTransitivity, 76.7s TimeCoverageRelationStatistics Valid=20186, Invalid=157476, Unknown=0, NotChecked=0, Total=177662 [2022-11-25 22:27:10,141 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 3298 mSDsluCounter, 971 mSDsCounter, 0 mSdLazyCounter, 4162 mSolverCounterSat, 223 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3298 SdHoareTripleChecker+Valid, 1004 SdHoareTripleChecker+Invalid, 4385 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 223 IncrementalHoareTripleChecker+Valid, 4162 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.7s IncrementalHoareTripleChecker+Time [2022-11-25 22:27:10,141 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3298 Valid, 1004 Invalid, 4385 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [223 Valid, 4162 Invalid, 0 Unknown, 0 Unchecked, 3.7s Time] [2022-11-25 22:27:10,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3901 states. [2022-11-25 22:27:10,156 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3901 to 959. [2022-11-25 22:27:10,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 959 states, 955 states have (on average 1.131937172774869) internal successors, (1081), 958 states have internal predecessors, (1081), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:27:10,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 959 states to 959 states and 1081 transitions. [2022-11-25 22:27:10,158 INFO L78 Accepts]: Start accepts. Automaton has 959 states and 1081 transitions. Word has length 50 [2022-11-25 22:27:10,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:27:10,158 INFO L495 AbstractCegarLoop]: Abstraction has 959 states and 1081 transitions. [2022-11-25 22:27:10,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 65 states, 64 states have (on average 2.1875) internal successors, (140), 65 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:27:10,158 INFO L276 IsEmpty]: Start isEmpty. Operand 959 states and 1081 transitions. [2022-11-25 22:27:10,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-25 22:27:10,159 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:27:10,160 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:27:10,166 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-25 22:27:10,366 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-25 22:27:10,367 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:27:10,367 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:27:10,367 INFO L85 PathProgramCache]: Analyzing trace with hash 1915198309, now seen corresponding path program 4 times [2022-11-25 22:27:10,367 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:27:10,367 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1310373447] [2022-11-25 22:27:10,367 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:27:10,367 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:27:10,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:27:11,580 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 20 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:27:11,580 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:27:11,580 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1310373447] [2022-11-25 22:27:11,580 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1310373447] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:27:11,580 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1489790375] [2022-11-25 22:27:11,580 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:27:11,580 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:27:11,581 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:27:11,581 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:27:11,584 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-25 22:27:11,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:27:11,788 INFO L263 TraceCheckSpWp]: Trace formula consists of 358 conjuncts, 77 conjunts are in the unsatisfiable core [2022-11-25 22:27:11,791 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:27:11,847 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:27:11,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-25 22:27:11,854 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:27:13,583 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 25 proven. 66 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:27:13,583 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:27:15,622 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:27:15,708 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 36 proven. 55 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:27:15,708 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1489790375] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:27:15,709 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1257738476] [2022-11-25 22:27:15,710 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:27:15,710 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:27:15,710 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:27:15,710 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:27:15,710 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:27:15,753 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:27:15,756 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:27:15,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:27:15,796 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:27:15,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:15,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:15,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:27:15,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:15,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:16,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:27:16,076 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:27:16,076 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:27:16,334 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:27:16,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:27:16,490 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:27:16,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:27:16,589 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:27:16,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:27:16,629 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:27:20,660 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '55577#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:27:20,660 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:27:20,660 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:27:20,660 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 23, 24] total 69 [2022-11-25 22:27:20,661 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [846129585] [2022-11-25 22:27:20,661 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:27:20,661 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 71 states [2022-11-25 22:27:20,661 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:27:20,662 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 71 interpolants. [2022-11-25 22:27:20,662 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=553, Invalid=6587, Unknown=0, NotChecked=0, Total=7140 [2022-11-25 22:27:20,662 INFO L87 Difference]: Start difference. First operand 959 states and 1081 transitions. Second operand has 71 states, 70 states have (on average 2.057142857142857) internal successors, (144), 70 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:27:33,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:27:33,539 INFO L93 Difference]: Finished difference Result 1585 states and 1724 transitions. [2022-11-25 22:27:33,540 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 75 states. [2022-11-25 22:27:33,540 INFO L78 Accepts]: Start accepts. Automaton has has 71 states, 70 states have (on average 2.057142857142857) internal successors, (144), 70 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-25 22:27:33,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:27:33,543 INFO L225 Difference]: With dead ends: 1585 [2022-11-25 22:27:33,543 INFO L226 Difference]: Without dead ends: 1482 [2022-11-25 22:27:33,545 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 242 GetRequests, 87 SyntacticMatches, 0 SemanticMatches, 155 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6276 ImplicationChecksByTransitivity, 18.4s TimeCoverageRelationStatistics Valid=4240, Invalid=20252, Unknown=0, NotChecked=0, Total=24492 [2022-11-25 22:27:33,557 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 948 mSDsluCounter, 412 mSDsCounter, 0 mSdLazyCounter, 2472 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 948 SdHoareTripleChecker+Valid, 433 SdHoareTripleChecker+Invalid, 2581 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 2472 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-25 22:27:33,557 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [948 Valid, 433 Invalid, 2581 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 2472 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-25 22:27:33,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1482 states. [2022-11-25 22:27:33,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1482 to 998. [2022-11-25 22:27:33,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 998 states, 994 states have (on average 1.1297786720321932) internal successors, (1123), 997 states have internal predecessors, (1123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:27:33,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 998 states to 998 states and 1123 transitions. [2022-11-25 22:27:33,572 INFO L78 Accepts]: Start accepts. Automaton has 998 states and 1123 transitions. Word has length 50 [2022-11-25 22:27:33,572 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:27:33,572 INFO L495 AbstractCegarLoop]: Abstraction has 998 states and 1123 transitions. [2022-11-25 22:27:33,572 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 71 states, 70 states have (on average 2.057142857142857) internal successors, (144), 70 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:27:33,573 INFO L276 IsEmpty]: Start isEmpty. Operand 998 states and 1123 transitions. [2022-11-25 22:27:33,574 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-25 22:27:33,574 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:27:33,574 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:27:33,585 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-25 22:27:33,781 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-25 22:27:33,781 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:27:33,781 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:27:33,782 INFO L85 PathProgramCache]: Analyzing trace with hash -1010377592, now seen corresponding path program 10 times [2022-11-25 22:27:33,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:27:33,782 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1886272894] [2022-11-25 22:27:33,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:27:33,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:27:33,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:27:35,593 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 24 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:27:35,593 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:27:35,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1886272894] [2022-11-25 22:27:35,593 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1886272894] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:27:35,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1842621335] [2022-11-25 22:27:35,593 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:27:35,593 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:27:35,594 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:27:35,594 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:27:35,597 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-25 22:27:35,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:27:35,811 INFO L263 TraceCheckSpWp]: Trace formula consists of 382 conjuncts, 90 conjunts are in the unsatisfiable core [2022-11-25 22:27:35,814 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:27:35,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:27:36,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:36,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 22:27:36,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 22:27:37,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 22:27:37,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 22:27:37,366 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:27:37,368 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:27:37,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-25 22:27:37,374 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 24 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:27:37,374 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:27:37,386 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1770 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1770) |c_ULTIMATE.start_cstrncat_~s2#1.base|) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) 0)) is different from false [2022-11-25 22:27:37,393 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1770 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1770) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 1)) 0)) is different from false [2022-11-25 22:27:37,501 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1770 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1770) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 3)) 0)) is different from false [2022-11-25 22:27:37,724 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:27:37,724 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 22:27:37,731 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:27:37,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 36 [2022-11-25 22:27:37,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:27:38,790 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 31 proven. 29 refuted. 0 times theorem prover too weak. 0 trivial. 37 not checked. [2022-11-25 22:27:38,791 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1842621335] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:27:38,791 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1673882639] [2022-11-25 22:27:38,792 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:27:38,792 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:27:38,792 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:27:38,793 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:27:38,793 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:27:38,831 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:27:38,834 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:27:38,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:27:38,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:38,949 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:38,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:39,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:27:39,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:39,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:39,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:27:39,173 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:27:39,174 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:27:39,281 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:27:39,284 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:27:39,336 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:27:39,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:27:39,468 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:27:39,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:27:39,536 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:27:39,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:27:39,575 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:27:43,232 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '58685#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:27:43,232 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:27:43,232 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:27:43,232 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 22, 22] total 61 [2022-11-25 22:27:43,232 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [511046880] [2022-11-25 22:27:43,232 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:27:43,233 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 61 states [2022-11-25 22:27:43,233 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:27:43,233 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 61 interpolants. [2022-11-25 22:27:43,233 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=399, Invalid=4713, Unknown=12, NotChecked=426, Total=5550 [2022-11-25 22:27:43,233 INFO L87 Difference]: Start difference. First operand 998 states and 1123 transitions. Second operand has 61 states, 61 states have (on average 2.2950819672131146) internal successors, (140), 61 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:27:46,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:27:46,427 INFO L93 Difference]: Finished difference Result 1052 states and 1174 transitions. [2022-11-25 22:27:46,427 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-25 22:27:46,427 INFO L78 Accepts]: Start accepts. Automaton has has 61 states, 61 states have (on average 2.2950819672131146) internal successors, (140), 61 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-25 22:27:46,428 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:27:46,429 INFO L225 Difference]: With dead ends: 1052 [2022-11-25 22:27:46,430 INFO L226 Difference]: Without dead ends: 956 [2022-11-25 22:27:46,430 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 208 GetRequests, 114 SyntacticMatches, 2 SemanticMatches, 92 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 2006 ImplicationChecksByTransitivity, 8.4s TimeCoverageRelationStatistics Valid=893, Invalid=7297, Unknown=12, NotChecked=540, Total=8742 [2022-11-25 22:27:46,431 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 178 mSDsluCounter, 323 mSDsCounter, 0 mSdLazyCounter, 1440 mSolverCounterSat, 14 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 178 SdHoareTripleChecker+Valid, 337 SdHoareTripleChecker+Invalid, 1641 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 1440 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 185 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:27:46,431 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [178 Valid, 337 Invalid, 1641 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 1440 Invalid, 2 Unknown, 185 Unchecked, 1.1s Time] [2022-11-25 22:27:46,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 956 states. [2022-11-25 22:27:46,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 956 to 956. [2022-11-25 22:27:46,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 956 states, 952 states have (on average 1.129201680672269) internal successors, (1075), 955 states have internal predecessors, (1075), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:27:46,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 956 states to 956 states and 1075 transitions. [2022-11-25 22:27:46,439 INFO L78 Accepts]: Start accepts. Automaton has 956 states and 1075 transitions. Word has length 52 [2022-11-25 22:27:46,439 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:27:46,439 INFO L495 AbstractCegarLoop]: Abstraction has 956 states and 1075 transitions. [2022-11-25 22:27:46,439 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 61 states, 61 states have (on average 2.2950819672131146) internal successors, (140), 61 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:27:46,439 INFO L276 IsEmpty]: Start isEmpty. Operand 956 states and 1075 transitions. [2022-11-25 22:27:46,441 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-25 22:27:46,441 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:27:46,441 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 11, 11, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:27:46,452 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Ended with exit code 0 [2022-11-25 22:27:46,647 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable50 [2022-11-25 22:27:46,648 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:27:46,648 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:27:46,648 INFO L85 PathProgramCache]: Analyzing trace with hash 1288637743, now seen corresponding path program 12 times [2022-11-25 22:27:46,648 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:27:46,648 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [290312218] [2022-11-25 22:27:46,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:27:46,649 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:27:46,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:27:48,492 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 81 proven. 184 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:27:48,492 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:27:48,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [290312218] [2022-11-25 22:27:48,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [290312218] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:27:48,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [394002256] [2022-11-25 22:27:48,492 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:27:48,492 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:27:48,492 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:27:48,493 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:27:48,495 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-25 22:27:48,802 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:27:48,802 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:27:48,806 INFO L263 TraceCheckSpWp]: Trace formula consists of 375 conjuncts, 104 conjunts are in the unsatisfiable core [2022-11-25 22:27:48,809 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:27:49,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:27:49,777 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:27:49,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 26 [2022-11-25 22:27:52,030 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:27:52,032 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:27:52,032 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:27:52,033 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:27:52,041 INFO L321 Elim1Store]: treesize reduction 4, result has 66.7 percent of original size [2022-11-25 22:27:52,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 38 treesize of output 21 [2022-11-25 22:27:52,119 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 12 proven. 253 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:27:52,120 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:27:53,424 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:27:53,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 93 treesize of output 83 [2022-11-25 22:27:55,379 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 14 proven. 251 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:27:55,379 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [394002256] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:27:55,379 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1665230098] [2022-11-25 22:27:55,380 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:27:55,381 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:27:55,381 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:27:55,381 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:27:55,381 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:27:55,423 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:27:55,427 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:27:55,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:27:55,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:55,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:55,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:27:55,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:27:55,629 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:27:55,630 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:27:55,717 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:27:59,092 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '61147#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:27:59,092 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:27:59,092 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:27:59,092 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 32, 32] total 88 [2022-11-25 22:27:59,092 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [491197962] [2022-11-25 22:27:59,092 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:27:59,093 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 88 states [2022-11-25 22:27:59,093 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:27:59,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 88 interpolants. [2022-11-25 22:27:59,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=304, Invalid=9008, Unknown=0, NotChecked=0, Total=9312 [2022-11-25 22:27:59,094 INFO L87 Difference]: Start difference. First operand 956 states and 1075 transitions. Second operand has 88 states, 88 states have (on average 1.7727272727272727) internal successors, (156), 88 states have internal predecessors, (156), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:28:32,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:28:32,999 INFO L93 Difference]: Finished difference Result 2805 states and 3060 transitions. [2022-11-25 22:28:32,999 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 99 states. [2022-11-25 22:28:32,999 INFO L78 Accepts]: Start accepts. Automaton has has 88 states, 88 states have (on average 1.7727272727272727) internal successors, (156), 88 states have internal predecessors, (156), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-25 22:28:32,999 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:28:33,002 INFO L225 Difference]: With dead ends: 2805 [2022-11-25 22:28:33,002 INFO L226 Difference]: Without dead ends: 2703 [2022-11-25 22:28:33,003 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 280 GetRequests, 89 SyntacticMatches, 0 SemanticMatches, 191 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6820 ImplicationChecksByTransitivity, 35.7s TimeCoverageRelationStatistics Valid=2683, Invalid=34373, Unknown=0, NotChecked=0, Total=37056 [2022-11-25 22:28:33,004 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 3274 mSDsluCounter, 4241 mSDsCounter, 0 mSdLazyCounter, 10281 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3274 SdHoareTripleChecker+Valid, 4326 SdHoareTripleChecker+Invalid, 10355 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 10281 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.7s IncrementalHoareTripleChecker+Time [2022-11-25 22:28:33,004 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3274 Valid, 4326 Invalid, 10355 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [74 Valid, 10281 Invalid, 0 Unknown, 0 Unchecked, 7.7s Time] [2022-11-25 22:28:33,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2703 states. [2022-11-25 22:28:33,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2703 to 1059. [2022-11-25 22:28:33,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1059 states, 1055 states have (on average 1.1308056872037915) internal successors, (1193), 1058 states have internal predecessors, (1193), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:28:33,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1059 states to 1059 states and 1193 transitions. [2022-11-25 22:28:33,024 INFO L78 Accepts]: Start accepts. Automaton has 1059 states and 1193 transitions. Word has length 53 [2022-11-25 22:28:33,024 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:28:33,024 INFO L495 AbstractCegarLoop]: Abstraction has 1059 states and 1193 transitions. [2022-11-25 22:28:33,025 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 88 states, 88 states have (on average 1.7727272727272727) internal successors, (156), 88 states have internal predecessors, (156), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:28:33,025 INFO L276 IsEmpty]: Start isEmpty. Operand 1059 states and 1193 transitions. [2022-11-25 22:28:33,026 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-25 22:28:33,026 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:28:33,026 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:28:33,046 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-11-25 22:28:33,237 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable51,38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:28:33,237 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:28:33,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:28:33,238 INFO L85 PathProgramCache]: Analyzing trace with hash 1225961409, now seen corresponding path program 5 times [2022-11-25 22:28:33,238 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:28:33,238 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1376878740] [2022-11-25 22:28:33,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:28:33,238 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:28:33,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:28:34,778 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 15 proven. 67 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 22:28:34,778 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:28:34,778 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1376878740] [2022-11-25 22:28:34,778 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1376878740] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:28:34,778 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1935651916] [2022-11-25 22:28:34,778 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:28:34,778 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:28:34,778 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:28:34,779 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:28:34,787 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-11-25 22:28:35,307 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-25 22:28:35,307 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:28:35,311 INFO L263 TraceCheckSpWp]: Trace formula consists of 379 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-25 22:28:35,314 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:28:35,374 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:28:35,374 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-25 22:28:35,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:28:37,690 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 16 proven. 66 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 22:28:37,690 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:28:40,033 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:28:40,140 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 25 proven. 57 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 22:28:40,140 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1935651916] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:28:40,140 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [718856782] [2022-11-25 22:28:40,141 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:28:40,141 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:28:40,142 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:28:40,142 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:28:40,142 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:28:40,181 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:28:40,187 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:28:40,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:28:40,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:28:40,267 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:28:40,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:28:40,359 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:28:40,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:28:40,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:28:40,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:28:40,517 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:28:40,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:28:40,748 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:28:40,749 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:28:40,904 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:28:40,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:28:40,980 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:28:40,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:28:41,026 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:28:45,153 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '65595#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:28:45,154 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:28:45,154 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:28:45,154 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 23, 24] total 69 [2022-11-25 22:28:45,154 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [202968115] [2022-11-25 22:28:45,154 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:28:45,154 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 71 states [2022-11-25 22:28:45,154 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:28:45,155 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 71 interpolants. [2022-11-25 22:28:45,156 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=606, Invalid=6534, Unknown=0, NotChecked=0, Total=7140 [2022-11-25 22:28:45,156 INFO L87 Difference]: Start difference. First operand 1059 states and 1193 transitions. Second operand has 71 states, 70 states have (on average 2.1) internal successors, (147), 70 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:28:58,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:28:58,353 INFO L93 Difference]: Finished difference Result 1391 states and 1533 transitions. [2022-11-25 22:28:58,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2022-11-25 22:28:58,354 INFO L78 Accepts]: Start accepts. Automaton has has 71 states, 70 states have (on average 2.1) internal successors, (147), 70 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-25 22:28:58,354 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:28:58,356 INFO L225 Difference]: With dead ends: 1391 [2022-11-25 22:28:58,356 INFO L226 Difference]: Without dead ends: 1356 [2022-11-25 22:28:58,357 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 237 GetRequests, 95 SyntacticMatches, 1 SemanticMatches, 141 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5501 ImplicationChecksByTransitivity, 19.2s TimeCoverageRelationStatistics Valid=3354, Invalid=16952, Unknown=0, NotChecked=0, Total=20306 [2022-11-25 22:28:58,357 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 1171 mSDsluCounter, 278 mSDsCounter, 0 mSdLazyCounter, 2142 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1171 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 2197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 2142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:28:58,357 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1171 Valid, 292 Invalid, 2197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 2142 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-11-25 22:28:58,358 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1356 states. [2022-11-25 22:28:58,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1356 to 922. [2022-11-25 22:28:58,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 922 states, 918 states have (on average 1.1427015250544663) internal successors, (1049), 921 states have internal predecessors, (1049), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:28:58,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 922 states to 922 states and 1049 transitions. [2022-11-25 22:28:58,368 INFO L78 Accepts]: Start accepts. Automaton has 922 states and 1049 transitions. Word has length 53 [2022-11-25 22:28:58,368 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:28:58,368 INFO L495 AbstractCegarLoop]: Abstraction has 922 states and 1049 transitions. [2022-11-25 22:28:58,369 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 71 states, 70 states have (on average 2.1) internal successors, (147), 70 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:28:58,369 INFO L276 IsEmpty]: Start isEmpty. Operand 922 states and 1049 transitions. [2022-11-25 22:28:58,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-25 22:28:58,370 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:28:58,370 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:28:58,377 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Forceful destruction successful, exit code 0 [2022-11-25 22:28:58,577 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable52,39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:28:58,577 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:28:58,577 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:28:58,578 INFO L85 PathProgramCache]: Analyzing trace with hash -2003058051, now seen corresponding path program 6 times [2022-11-25 22:28:58,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:28:58,578 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2039579055] [2022-11-25 22:28:58,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:28:58,578 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:28:58,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:28:59,916 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 4 proven. 112 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:28:59,917 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:28:59,917 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2039579055] [2022-11-25 22:28:59,917 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2039579055] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:28:59,917 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1482085710] [2022-11-25 22:28:59,917 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:28:59,917 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:28:59,917 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:28:59,933 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:28:59,957 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-11-25 22:29:00,217 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:29:00,218 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:29:00,221 INFO L263 TraceCheckSpWp]: Trace formula consists of 369 conjuncts, 107 conjunts are in the unsatisfiable core [2022-11-25 22:29:00,223 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:29:00,240 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-25 22:29:00,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-25 22:29:01,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 22:29:02,080 INFO L321 Elim1Store]: treesize reduction 12, result has 67.6 percent of original size [2022-11-25 22:29:02,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 70 treesize of output 78 [2022-11-25 22:29:03,419 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:29:03,419 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:29:05,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 35 treesize of output 29 [2022-11-25 22:29:07,334 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:29:07,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1482085710] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:29:07,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [923285221] [2022-11-25 22:29:07,336 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 22:29:07,336 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:29:07,336 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:29:07,336 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:29:07,336 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:29:07,399 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:29:07,402 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:29:07,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:29:07,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:29:07,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:29:07,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:29:07,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:29:07,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:29:07,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:29:07,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:29:07,736 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:29:07,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:29:07,873 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-25 22:29:07,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-25 22:29:07,987 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:29:07,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:29:08,076 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:29:08,076 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:29:08,159 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:29:12,887 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '68439#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:29:12,887 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:29:12,887 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:29:12,888 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 29, 30] total 82 [2022-11-25 22:29:12,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1131024358] [2022-11-25 22:29:12,888 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:29:12,889 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 83 states [2022-11-25 22:29:12,889 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:29:12,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 83 interpolants. [2022-11-25 22:29:12,890 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=575, Invalid=8737, Unknown=0, NotChecked=0, Total=9312 [2022-11-25 22:29:12,890 INFO L87 Difference]: Start difference. First operand 922 states and 1049 transitions. Second operand has 83 states, 82 states have (on average 1.9268292682926829) internal successors, (158), 83 states have internal predecessors, (158), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:31:09,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:31:09,570 INFO L93 Difference]: Finished difference Result 4333 states and 4756 transitions. [2022-11-25 22:31:09,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 363 states. [2022-11-25 22:31:09,570 INFO L78 Accepts]: Start accepts. Automaton has has 83 states, 82 states have (on average 1.9268292682926829) internal successors, (158), 83 states have internal predecessors, (158), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2022-11-25 22:31:09,570 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:31:09,574 INFO L225 Difference]: With dead ends: 4333 [2022-11-25 22:31:09,574 INFO L226 Difference]: Without dead ends: 4299 [2022-11-25 22:31:09,581 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 540 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 450 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 76358 ImplicationChecksByTransitivity, 121.1s TimeCoverageRelationStatistics Valid=21418, Invalid=182434, Unknown=0, NotChecked=0, Total=203852 [2022-11-25 22:31:09,582 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 3438 mSDsluCounter, 1090 mSDsCounter, 0 mSdLazyCounter, 6083 mSolverCounterSat, 267 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3438 SdHoareTripleChecker+Valid, 1115 SdHoareTripleChecker+Invalid, 6350 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 267 IncrementalHoareTripleChecker+Valid, 6083 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2022-11-25 22:31:09,582 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3438 Valid, 1115 Invalid, 6350 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [267 Valid, 6083 Invalid, 0 Unknown, 0 Unchecked, 5.9s Time] [2022-11-25 22:31:09,583 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4299 states. [2022-11-25 22:31:09,597 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4299 to 908. [2022-11-25 22:31:09,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 908 states, 904 states have (on average 1.1426991150442478) internal successors, (1033), 907 states have internal predecessors, (1033), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:31:09,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 908 states to 908 states and 1033 transitions. [2022-11-25 22:31:09,598 INFO L78 Accepts]: Start accepts. Automaton has 908 states and 1033 transitions. Word has length 54 [2022-11-25 22:31:09,598 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:31:09,598 INFO L495 AbstractCegarLoop]: Abstraction has 908 states and 1033 transitions. [2022-11-25 22:31:09,599 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 83 states, 82 states have (on average 1.9268292682926829) internal successors, (158), 83 states have internal predecessors, (158), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:31:09,599 INFO L276 IsEmpty]: Start isEmpty. Operand 908 states and 1033 transitions. [2022-11-25 22:31:09,599 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-25 22:31:09,599 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:31:09,599 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:31:09,609 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Forceful destruction successful, exit code 0 [2022-11-25 22:31:09,800 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable53,40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:31:09,800 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:31:09,800 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:31:09,800 INFO L85 PathProgramCache]: Analyzing trace with hash -1151087795, now seen corresponding path program 11 times [2022-11-25 22:31:09,800 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:31:09,801 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [609331211] [2022-11-25 22:31:09,801 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:31:09,801 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:31:09,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:31:11,462 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 17 proven. 89 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:31:11,462 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:31:11,462 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [609331211] [2022-11-25 22:31:11,463 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [609331211] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:31:11,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [797807760] [2022-11-25 22:31:11,463 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:31:11,463 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:31:11,463 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:31:11,464 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:31:11,467 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-11-25 22:31:12,198 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-25 22:31:12,198 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:31:12,204 INFO L263 TraceCheckSpWp]: Trace formula consists of 395 conjuncts, 122 conjunts are in the unsatisfiable core [2022-11-25 22:31:12,207 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:31:12,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:31:13,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 22:31:13,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-25 22:31:13,503 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-25 22:31:13,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-25 22:31:14,048 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-25 22:31:14,325 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:31:14,328 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:31:14,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-25 22:31:14,333 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 15 proven. 90 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 22:31:14,334 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:31:14,588 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2049 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_2049) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~s2#1.offset|)) 0)) is different from false [2022-11-25 22:31:14,606 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2049 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_2049) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 3)) 0)) is different from false [2022-11-25 22:31:14,743 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:31:14,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 22:31:14,751 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:31:14,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 22:31:14,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-25 22:31:15,319 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 15 proven. 31 refuted. 0 times theorem prover too weak. 25 trivial. 35 not checked. [2022-11-25 22:31:15,320 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [797807760] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:31:15,320 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1558626559] [2022-11-25 22:31:15,321 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:31:15,321 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:31:15,321 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:31:15,321 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:31:15,321 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:31:15,367 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:31:15,370 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:31:15,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:31:15,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:31:15,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:15,490 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:15,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:31:15,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:15,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:15,735 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:31:15,794 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:31:15,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:31:15,934 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:31:15,938 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:31:16,008 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:31:16,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:31:16,154 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:31:16,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:31:16,248 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:31:16,248 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:31:16,293 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:31:21,020 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '74790#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:31:21,020 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:31:21,020 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:31:21,020 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [32, 27, 19] total 68 [2022-11-25 22:31:21,020 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [191652495] [2022-11-25 22:31:21,020 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:31:21,021 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 68 states [2022-11-25 22:31:21,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:31:21,022 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 68 interpolants. [2022-11-25 22:31:21,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=352, Invalid=5937, Unknown=39, NotChecked=314, Total=6642 [2022-11-25 22:31:21,023 INFO L87 Difference]: Start difference. First operand 908 states and 1033 transitions. Second operand has 68 states, 68 states have (on average 2.0294117647058822) internal successors, (138), 68 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:31:28,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:31:28,100 INFO L93 Difference]: Finished difference Result 1655 states and 1827 transitions. [2022-11-25 22:31:28,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-11-25 22:31:28,101 INFO L78 Accepts]: Start accepts. Automaton has has 68 states, 68 states have (on average 2.0294117647058822) internal successors, (138), 68 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2022-11-25 22:31:28,101 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:31:28,103 INFO L225 Difference]: With dead ends: 1655 [2022-11-25 22:31:28,103 INFO L226 Difference]: Without dead ends: 1207 [2022-11-25 22:31:28,104 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 245 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 129 ConstructedPredicates, 2 IntricatePredicates, 1 DeprecatedPredicates, 4689 ImplicationChecksByTransitivity, 12.2s TimeCoverageRelationStatistics Valid=1345, Invalid=15088, Unknown=87, NotChecked=510, Total=17030 [2022-11-25 22:31:28,105 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 417 mSDsluCounter, 1186 mSDsCounter, 0 mSdLazyCounter, 3076 mSolverCounterSat, 40 mSolverCounterUnsat, 63 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 417 SdHoareTripleChecker+Valid, 1234 SdHoareTripleChecker+Invalid, 3463 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 3076 IncrementalHoareTripleChecker+Invalid, 63 IncrementalHoareTripleChecker+Unknown, 284 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2022-11-25 22:31:28,105 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [417 Valid, 1234 Invalid, 3463 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 3076 Invalid, 63 Unknown, 284 Unchecked, 2.5s Time] [2022-11-25 22:31:28,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1207 states. [2022-11-25 22:31:28,112 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1207 to 1060. [2022-11-25 22:31:28,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1060 states, 1056 states have (on average 1.137310606060606) internal successors, (1201), 1059 states have internal predecessors, (1201), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:31:28,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1060 states to 1060 states and 1201 transitions. [2022-11-25 22:31:28,114 INFO L78 Accepts]: Start accepts. Automaton has 1060 states and 1201 transitions. Word has length 54 [2022-11-25 22:31:28,114 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:31:28,114 INFO L495 AbstractCegarLoop]: Abstraction has 1060 states and 1201 transitions. [2022-11-25 22:31:28,115 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 68 states, 68 states have (on average 2.0294117647058822) internal successors, (138), 68 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:31:28,115 INFO L276 IsEmpty]: Start isEmpty. Operand 1060 states and 1201 transitions. [2022-11-25 22:31:28,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-25 22:31:28,117 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:31:28,117 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:31:28,129 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Forceful destruction successful, exit code 0 [2022-11-25 22:31:28,326 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable54,41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:31:28,326 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:31:28,326 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:31:28,326 INFO L85 PathProgramCache]: Analyzing trace with hash -1434716067, now seen corresponding path program 12 times [2022-11-25 22:31:28,327 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:31:28,327 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1076228156] [2022-11-25 22:31:28,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:31:28,327 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:31:28,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:31:29,094 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 9 proven. 81 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 22:31:29,094 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:31:29,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1076228156] [2022-11-25 22:31:29,094 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1076228156] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:31:29,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [958455133] [2022-11-25 22:31:29,094 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:31:29,095 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:31:29,095 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:31:29,097 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:31:29,129 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-11-25 22:31:29,728 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:31:29,729 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:31:29,733 INFO L263 TraceCheckSpWp]: Trace formula consists of 408 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-25 22:31:29,736 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:31:29,751 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 22:31:29,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 22:31:30,060 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 16 proven. 74 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 22:31:30,060 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:31:30,682 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 16 proven. 74 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 22:31:30,682 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [958455133] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:31:30,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1557241835] [2022-11-25 22:31:30,684 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 22:31:30,684 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:31:30,684 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:31:30,684 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:31:30,684 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:31:30,718 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:31:30,728 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:31:30,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:31:30,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 22:31:30,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:30,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:30,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:30,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:30,982 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:31,038 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:31:31,100 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:31:31,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:31:31,282 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:31:31,286 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 22:31:31,351 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 22:31:31,351 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 22:31:31,525 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:31:31,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:31:31,609 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 22:31:31,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 22:31:31,658 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:31:35,334 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '77986#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:31:35,334 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:31:35,334 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:31:35,335 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 15, 15] total 38 [2022-11-25 22:31:35,335 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1625413225] [2022-11-25 22:31:35,335 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:31:35,335 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-11-25 22:31:35,335 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:31:35,336 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-11-25 22:31:35,336 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=293, Invalid=2463, Unknown=0, NotChecked=0, Total=2756 [2022-11-25 22:31:35,337 INFO L87 Difference]: Start difference. First operand 1060 states and 1201 transitions. Second operand has 39 states, 38 states have (on average 3.0) internal successors, (114), 39 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:31:36,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:31:36,975 INFO L93 Difference]: Finished difference Result 1248 states and 1378 transitions. [2022-11-25 22:31:36,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-25 22:31:36,976 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 38 states have (on average 3.0) internal successors, (114), 39 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-11-25 22:31:36,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:31:36,978 INFO L225 Difference]: With dead ends: 1248 [2022-11-25 22:31:36,978 INFO L226 Difference]: Without dead ends: 1248 [2022-11-25 22:31:36,978 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1406 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=857, Invalid=4843, Unknown=0, NotChecked=0, Total=5700 [2022-11-25 22:31:36,979 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 630 mSDsluCounter, 466 mSDsCounter, 0 mSdLazyCounter, 1132 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 630 SdHoareTripleChecker+Valid, 509 SdHoareTripleChecker+Invalid, 1138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 1132 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-25 22:31:36,979 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [630 Valid, 509 Invalid, 1138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 1132 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-25 22:31:36,980 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1248 states. [2022-11-25 22:31:36,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1248 to 1111. [2022-11-25 22:31:36,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1111 states, 1107 states have (on average 1.131887985546522) internal successors, (1253), 1110 states have internal predecessors, (1253), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:31:36,999 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1111 states to 1111 states and 1253 transitions. [2022-11-25 22:31:36,999 INFO L78 Accepts]: Start accepts. Automaton has 1111 states and 1253 transitions. Word has length 56 [2022-11-25 22:31:36,999 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:31:36,999 INFO L495 AbstractCegarLoop]: Abstraction has 1111 states and 1253 transitions. [2022-11-25 22:31:37,000 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 38 states have (on average 3.0) internal successors, (114), 39 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:31:37,000 INFO L276 IsEmpty]: Start isEmpty. Operand 1111 states and 1253 transitions. [2022-11-25 22:31:37,001 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-25 22:31:37,001 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:31:37,002 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 12, 12, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:31:37,009 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Forceful destruction successful, exit code 0 [2022-11-25 22:31:37,202 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable55 [2022-11-25 22:31:37,202 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 22:31:37,203 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:31:37,203 INFO L85 PathProgramCache]: Analyzing trace with hash 1420713699, now seen corresponding path program 13 times [2022-11-25 22:31:37,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:31:37,203 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [477615930] [2022-11-25 22:31:37,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:31:37,203 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:31:37,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:31:39,610 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 100 proven. 213 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:31:39,610 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:31:39,610 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [477615930] [2022-11-25 22:31:39,611 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [477615930] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:31:39,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [872923657] [2022-11-25 22:31:39,611 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:31:39,611 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:31:39,611 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:31:39,612 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:31:39,615 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_70525439-8c2e-41d6-8b01-e5999c2312fd/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-11-25 22:31:39,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:31:39,903 INFO L263 TraceCheckSpWp]: Trace formula consists of 399 conjuncts, 105 conjunts are in the unsatisfiable core [2022-11-25 22:31:39,907 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:31:39,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:31:40,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:31:41,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 22:31:43,136 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-11-25 22:31:43,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-11-25 22:31:43,221 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 13 proven. 300 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:31:43,221 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:31:44,798 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:31:44,798 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-25 22:31:44,806 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:31:44,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-25 22:31:45,281 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 13 proven. 300 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:31:45,282 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [872923657] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:31:45,282 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1113102051] [2022-11-25 22:31:45,283 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:31:45,283 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:31:45,284 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:31:45,284 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:31:45,284 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:31:45,321 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:31:45,324 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:31:45,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:31:45,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:45,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:45,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:31:45,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 22:31:45,577 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 22:31:45,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 22:31:45,652 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:31:48,799 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '80818#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:31:48,799 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:31:48,800 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:31:48,800 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 32, 32] total 77 [2022-11-25 22:31:48,800 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2141569134] [2022-11-25 22:31:48,800 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:31:48,800 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 77 states [2022-11-25 22:31:48,800 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:31:48,801 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 77 interpolants. [2022-11-25 22:31:48,801 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=281, Invalid=7011, Unknown=18, NotChecked=0, Total=7310 [2022-11-25 22:31:48,801 INFO L87 Difference]: Start difference. First operand 1111 states and 1253 transitions. Second operand has 77 states, 77 states have (on average 1.87012987012987) internal successors, (144), 77 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)