./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 34885b99d6eef31987b044fabc3622fa239d5dff7e774ca124915f70431dc2b3 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 23:54:09,610 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 23:54:09,612 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 23:54:09,632 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 23:54:09,632 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 23:54:09,633 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 23:54:09,635 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 23:54:09,637 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 23:54:09,638 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 23:54:09,639 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 23:54:09,641 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 23:54:09,642 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 23:54:09,642 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 23:54:09,643 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 23:54:09,645 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 23:54:09,646 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 23:54:09,647 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 23:54:09,648 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 23:54:09,650 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 23:54:09,651 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 23:54:09,653 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 23:54:09,654 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 23:54:09,656 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 23:54:09,657 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 23:54:09,660 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 23:54:09,660 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 23:54:09,661 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 23:54:09,662 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 23:54:09,662 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 23:54:09,663 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 23:54:09,664 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 23:54:09,665 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 23:54:09,665 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 23:54:09,666 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 23:54:09,667 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 23:54:09,668 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 23:54:09,668 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 23:54:09,669 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 23:54:09,669 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 23:54:09,670 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 23:54:09,671 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 23:54:09,675 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-25 23:54:09,711 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 23:54:09,711 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 23:54:09,711 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 23:54:09,712 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 23:54:09,712 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 23:54:09,712 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 23:54:09,713 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-25 23:54:09,713 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-25 23:54:09,713 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-25 23:54:09,713 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-25 23:54:09,714 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-25 23:54:09,714 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-25 23:54:09,714 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-25 23:54:09,714 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-25 23:54:09,720 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-25 23:54:09,720 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-25 23:54:09,720 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-25 23:54:09,720 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-25 23:54:09,721 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 23:54:09,721 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 23:54:09,721 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 23:54:09,722 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 23:54:09,722 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-25 23:54:09,722 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 23:54:09,723 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 23:54:09,723 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 23:54:09,723 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-25 23:54:09,724 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-25 23:54:09,724 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-25 23:54:09,725 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 23:54:09,725 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-25 23:54:09,725 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 23:54:09,725 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 23:54:09,725 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 23:54:09,726 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 23:54:09,726 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 23:54:09,727 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 23:54:09,727 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-25 23:54:09,727 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 23:54:09,727 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-25 23:54:09,727 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 23:54:09,728 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-25 23:54:09,728 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 34885b99d6eef31987b044fabc3622fa239d5dff7e774ca124915f70431dc2b3 [2022-11-25 23:54:10,044 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 23:54:10,083 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 23:54:10,085 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 23:54:10,087 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 23:54:10,087 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 23:54:10,089 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i [2022-11-25 23:54:13,177 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 23:54:13,403 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 23:54:13,404 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i [2022-11-25 23:54:13,415 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/data/3039b1e60/e59de7574fd94bb49dbd5d4370a57104/FLAGe9bf411b9 [2022-11-25 23:54:13,432 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/data/3039b1e60/e59de7574fd94bb49dbd5d4370a57104 [2022-11-25 23:54:13,434 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 23:54:13,436 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 23:54:13,437 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 23:54:13,438 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 23:54:13,448 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 23:54:13,449 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:13,450 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@65c2c07f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13, skipping insertion in model container [2022-11-25 23:54:13,450 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:13,458 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 23:54:13,489 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 23:54:13,782 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 23:54:13,798 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 23:54:13,884 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 23:54:13,922 INFO L208 MainTranslator]: Completed translation [2022-11-25 23:54:13,923 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13 WrapperNode [2022-11-25 23:54:13,923 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 23:54:13,925 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 23:54:13,925 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 23:54:13,925 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 23:54:13,933 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:13,969 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:14,006 INFO L138 Inliner]: procedures = 117, calls = 17, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 103 [2022-11-25 23:54:14,007 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 23:54:14,008 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 23:54:14,008 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 23:54:14,008 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 23:54:14,018 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:14,018 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:14,027 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:14,028 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:14,043 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:14,049 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:14,057 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:14,062 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:14,064 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 23:54:14,069 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 23:54:14,069 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 23:54:14,070 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 23:54:14,071 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (1/1) ... [2022-11-25 23:54:14,078 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 23:54:14,090 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:14,104 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 23:54:14,107 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 23:54:14,142 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-25 23:54:14,143 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-25 23:54:14,143 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-25 23:54:14,143 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-25 23:54:14,144 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 23:54:14,144 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 23:54:14,257 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 23:54:14,259 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 23:54:14,696 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 23:54:14,749 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 23:54:14,749 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-25 23:54:14,752 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 11:54:14 BoogieIcfgContainer [2022-11-25 23:54:14,752 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 23:54:14,754 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 23:54:14,755 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 23:54:14,758 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 23:54:14,758 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 11:54:13" (1/3) ... [2022-11-25 23:54:14,759 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@45f5e8b9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 11:54:14, skipping insertion in model container [2022-11-25 23:54:14,759 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:54:13" (2/3) ... [2022-11-25 23:54:14,760 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@45f5e8b9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 11:54:14, skipping insertion in model container [2022-11-25 23:54:14,760 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 11:54:14" (3/3) ... [2022-11-25 23:54:14,761 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrncat-alloca-2.i [2022-11-25 23:54:14,783 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 23:54:14,783 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 17 error locations. [2022-11-25 23:54:14,832 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 23:54:14,839 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3b3b1b83, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 23:54:14,840 INFO L358 AbstractCegarLoop]: Starting to check reachability of 17 error locations. [2022-11-25 23:54:14,844 INFO L276 IsEmpty]: Start isEmpty. Operand has 37 states, 19 states have (on average 2.3684210526315788) internal successors, (45), 36 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:14,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-25 23:54:14,852 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:14,853 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-25 23:54:14,853 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:14,859 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:14,860 INFO L85 PathProgramCache]: Analyzing trace with hash 163242, now seen corresponding path program 1 times [2022-11-25 23:54:14,870 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:14,870 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1725043556] [2022-11-25 23:54:14,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:14,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:14,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:15,110 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:15,111 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:15,111 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1725043556] [2022-11-25 23:54:15,113 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1725043556] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:15,113 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:54:15,114 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-25 23:54:15,115 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [8212894] [2022-11-25 23:54:15,116 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:15,122 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 23:54:15,122 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:15,183 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 23:54:15,183 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:54:15,186 INFO L87 Difference]: Start difference. First operand has 37 states, 19 states have (on average 2.3684210526315788) internal successors, (45), 36 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:15,291 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:15,292 INFO L93 Difference]: Finished difference Result 38 states and 44 transitions. [2022-11-25 23:54:15,293 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:54:15,295 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-25 23:54:15,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:15,303 INFO L225 Difference]: With dead ends: 38 [2022-11-25 23:54:15,303 INFO L226 Difference]: Without dead ends: 36 [2022-11-25 23:54:15,305 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:54:15,309 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 1 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:15,310 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 51 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:54:15,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-25 23:54:15,341 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-25 23:54:15,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:15,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-25 23:54:15,345 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 3 [2022-11-25 23:54:15,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:15,346 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-25 23:54:15,346 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:15,346 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-25 23:54:15,347 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-25 23:54:15,347 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:15,347 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-25 23:54:15,347 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 23:54:15,348 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:15,348 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:15,349 INFO L85 PathProgramCache]: Analyzing trace with hash 5059762, now seen corresponding path program 1 times [2022-11-25 23:54:15,349 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:15,349 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [462299739] [2022-11-25 23:54:15,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:15,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:15,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:15,635 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:15,636 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:15,636 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [462299739] [2022-11-25 23:54:15,636 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [462299739] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:15,637 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:54:15,637 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:54:15,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [467416487] [2022-11-25 23:54:15,637 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:15,638 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 23:54:15,639 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:15,639 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 23:54:15,640 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:54:15,640 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:15,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:15,686 INFO L93 Difference]: Finished difference Result 34 states and 39 transitions. [2022-11-25 23:54:15,686 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:54:15,686 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-25 23:54:15,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:15,687 INFO L225 Difference]: With dead ends: 34 [2022-11-25 23:54:15,687 INFO L226 Difference]: Without dead ends: 34 [2022-11-25 23:54:15,688 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:54:15,689 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 34 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:15,690 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 18 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:54:15,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-11-25 23:54:15,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2022-11-25 23:54:15,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 33 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:15,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 39 transitions. [2022-11-25 23:54:15,695 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 39 transitions. Word has length 4 [2022-11-25 23:54:15,696 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:15,696 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 39 transitions. [2022-11-25 23:54:15,696 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:15,696 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 39 transitions. [2022-11-25 23:54:15,697 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-25 23:54:15,697 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:15,697 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-25 23:54:15,697 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 23:54:15,698 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:15,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:15,698 INFO L85 PathProgramCache]: Analyzing trace with hash 5059763, now seen corresponding path program 1 times [2022-11-25 23:54:15,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:15,699 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1151466798] [2022-11-25 23:54:15,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:15,699 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:15,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:16,047 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:16,048 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:16,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1151466798] [2022-11-25 23:54:16,048 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1151466798] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:16,049 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:54:16,049 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:54:16,049 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [24464503] [2022-11-25 23:54:16,049 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:16,050 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:54:16,050 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:16,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:54:16,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:54:16,051 INFO L87 Difference]: Start difference. First operand 34 states and 39 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:16,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:16,201 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2022-11-25 23:54:16,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:54:16,202 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-25 23:54:16,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:16,204 INFO L225 Difference]: With dead ends: 65 [2022-11-25 23:54:16,207 INFO L226 Difference]: Without dead ends: 65 [2022-11-25 23:54:16,207 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-25 23:54:16,211 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 108 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:16,216 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [108 Valid, 49 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:54:16,219 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-25 23:54:16,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 36. [2022-11-25 23:54:16,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 21 states have (on average 2.0) internal successors, (42), 35 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:16,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 42 transitions. [2022-11-25 23:54:16,227 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 42 transitions. Word has length 4 [2022-11-25 23:54:16,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:16,227 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 42 transitions. [2022-11-25 23:54:16,228 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:16,228 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 42 transitions. [2022-11-25 23:54:16,228 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 23:54:16,228 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:16,228 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-25 23:54:16,229 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 23:54:16,229 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:16,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:16,230 INFO L85 PathProgramCache]: Analyzing trace with hash 156955998, now seen corresponding path program 1 times [2022-11-25 23:54:16,230 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:16,230 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [52902002] [2022-11-25 23:54:16,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:16,231 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:16,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:16,430 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:16,431 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:16,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [52902002] [2022-11-25 23:54:16,431 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [52902002] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:16,432 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:54:16,432 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 23:54:16,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1816440056] [2022-11-25 23:54:16,432 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:16,433 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:54:16,433 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:16,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:54:16,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:54:16,434 INFO L87 Difference]: Start difference. First operand 36 states and 42 transitions. Second operand has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:16,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:16,537 INFO L93 Difference]: Finished difference Result 62 states and 71 transitions. [2022-11-25 23:54:16,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:54:16,539 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 23:54:16,539 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:16,540 INFO L225 Difference]: With dead ends: 62 [2022-11-25 23:54:16,540 INFO L226 Difference]: Without dead ends: 62 [2022-11-25 23:54:16,541 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 23:54:16,547 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 130 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:16,548 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 74 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:54:16,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-25 23:54:16,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 37. [2022-11-25 23:54:16,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 22 states have (on average 1.9545454545454546) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:16,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-25 23:54:16,560 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 5 [2022-11-25 23:54:16,561 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:16,561 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-25 23:54:16,561 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:16,561 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-25 23:54:16,562 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 23:54:16,563 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:16,563 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-25 23:54:16,563 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 23:54:16,564 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:16,564 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:16,565 INFO L85 PathProgramCache]: Analyzing trace with hash 156958550, now seen corresponding path program 1 times [2022-11-25 23:54:16,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:16,566 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1831641814] [2022-11-25 23:54:16,566 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:16,566 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:16,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:16,739 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:16,739 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:16,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1831641814] [2022-11-25 23:54:16,740 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1831641814] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:16,740 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:54:16,740 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 23:54:16,740 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1301058340] [2022-11-25 23:54:16,740 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:16,741 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:54:16,741 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:16,742 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:54:16,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:54:16,742 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:16,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:16,804 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-11-25 23:54:16,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:54:16,805 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 23:54:16,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:16,805 INFO L225 Difference]: With dead ends: 37 [2022-11-25 23:54:16,805 INFO L226 Difference]: Without dead ends: 36 [2022-11-25 23:54:16,806 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:54:16,807 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 40 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:16,807 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 73 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:54:16,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-25 23:54:16,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-25 23:54:16,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:16,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-25 23:54:16,811 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 5 [2022-11-25 23:54:16,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:16,811 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-25 23:54:16,812 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:16,812 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-25 23:54:16,812 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-25 23:54:16,812 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:16,812 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-25 23:54:16,813 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 23:54:16,813 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:16,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:16,814 INFO L85 PathProgramCache]: Analyzing trace with hash 567552496, now seen corresponding path program 1 times [2022-11-25 23:54:16,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:16,814 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [207877562] [2022-11-25 23:54:16,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:16,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:16,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:17,027 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:17,027 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:17,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [207877562] [2022-11-25 23:54:17,028 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [207877562] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:17,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [794560282] [2022-11-25 23:54:17,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:17,028 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:17,029 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:17,034 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:17,040 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 23:54:17,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:17,116 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-25 23:54:17,122 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:17,270 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:17,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-25 23:54:17,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:54:17,434 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:17,434 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:17,575 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:17,583 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:17,584 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [794560282] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:17,584 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [646493514] [2022-11-25 23:54:17,601 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-25 23:54:17,601 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:17,606 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:17,611 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:17,611 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:17,689 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:17,692 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:17,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:17,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:17,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:17,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:17,983 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:18,515 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '525#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_#t~nondet14#1| 127) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet14#1|)) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:18,515 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:18,515 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:18,515 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 11 [2022-11-25 23:54:18,515 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1714603622] [2022-11-25 23:54:18,516 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:18,516 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-25 23:54:18,516 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:18,517 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-25 23:54:18,517 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2022-11-25 23:54:18,517 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:18,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:18,905 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2022-11-25 23:54:18,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 23:54:18,906 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-25 23:54:18,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:18,906 INFO L225 Difference]: With dead ends: 65 [2022-11-25 23:54:18,906 INFO L226 Difference]: Without dead ends: 65 [2022-11-25 23:54:18,907 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 4 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-11-25 23:54:18,907 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 138 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:18,908 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [138 Valid, 112 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:54:18,908 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-25 23:54:18,910 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 34. [2022-11-25 23:54:18,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 20 states have (on average 1.95) internal successors, (39), 33 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:18,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 39 transitions. [2022-11-25 23:54:18,916 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 39 transitions. Word has length 6 [2022-11-25 23:54:18,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:18,916 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 39 transitions. [2022-11-25 23:54:18,916 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:18,916 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 39 transitions. [2022-11-25 23:54:18,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-25 23:54:18,917 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:18,917 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:18,929 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:19,124 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-11-25 23:54:19,124 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:19,125 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:19,125 INFO L85 PathProgramCache]: Analyzing trace with hash 414361537, now seen corresponding path program 1 times [2022-11-25 23:54:19,125 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:19,125 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [297930567] [2022-11-25 23:54:19,125 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:19,125 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:19,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:19,187 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:19,188 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:19,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [297930567] [2022-11-25 23:54:19,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [297930567] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:19,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:54:19,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:54:19,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2084687482] [2022-11-25 23:54:19,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:19,189 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 23:54:19,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:19,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 23:54:19,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:54:19,190 INFO L87 Difference]: Start difference. First operand 34 states and 39 transitions. Second operand has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:19,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:19,224 INFO L93 Difference]: Finished difference Result 32 states and 37 transitions. [2022-11-25 23:54:19,224 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:54:19,225 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-25 23:54:19,225 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:19,225 INFO L225 Difference]: With dead ends: 32 [2022-11-25 23:54:19,225 INFO L226 Difference]: Without dead ends: 32 [2022-11-25 23:54:19,226 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:54:19,226 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 28 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:19,227 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 17 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:54:19,227 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-11-25 23:54:19,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 32. [2022-11-25 23:54:19,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 20 states have (on average 1.85) internal successors, (37), 31 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:19,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 37 transitions. [2022-11-25 23:54:19,230 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 37 transitions. Word has length 7 [2022-11-25 23:54:19,230 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:19,230 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 37 transitions. [2022-11-25 23:54:19,230 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:19,230 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 37 transitions. [2022-11-25 23:54:19,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-25 23:54:19,231 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:19,231 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:19,231 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-25 23:54:19,231 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:19,232 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:19,232 INFO L85 PathProgramCache]: Analyzing trace with hash 414361538, now seen corresponding path program 1 times [2022-11-25 23:54:19,232 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:19,232 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1190241987] [2022-11-25 23:54:19,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:19,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:19,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:19,393 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:19,394 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:19,394 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1190241987] [2022-11-25 23:54:19,394 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1190241987] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:19,394 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [362362308] [2022-11-25 23:54:19,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:19,395 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:19,395 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:19,396 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:19,411 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-25 23:54:19,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:19,480 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-25 23:54:19,482 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:19,553 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:19,553 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:19,622 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:19,622 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [362362308] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:19,622 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [389725198] [2022-11-25 23:54:19,624 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-25 23:54:19,625 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:19,625 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:19,627 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:19,627 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:19,711 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:19,717 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:19,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:19,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:19,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:19,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:19,974 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:20,848 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '751#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (not (< (+ |ULTIMATE.start_main_~i~0#1| 1) |ULTIMATE.start_main_~length1~0#1|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (< (+ |ULTIMATE.start_main_~i~1#1| 1) |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-25 23:54:20,848 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:20,848 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:20,848 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 11 [2022-11-25 23:54:20,848 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1476509839] [2022-11-25 23:54:20,848 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:20,849 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-25 23:54:20,849 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:20,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-25 23:54:20,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=240, Unknown=0, NotChecked=0, Total=306 [2022-11-25 23:54:20,850 INFO L87 Difference]: Start difference. First operand 32 states and 37 transitions. Second operand has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:21,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:21,006 INFO L93 Difference]: Finished difference Result 60 states and 69 transitions. [2022-11-25 23:54:21,006 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-25 23:54:21,007 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-25 23:54:21,007 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:21,007 INFO L225 Difference]: With dead ends: 60 [2022-11-25 23:54:21,007 INFO L226 Difference]: Without dead ends: 60 [2022-11-25 23:54:21,008 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 7 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 109 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=105, Invalid=401, Unknown=0, NotChecked=0, Total=506 [2022-11-25 23:54:21,009 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 209 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:21,009 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 132 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:54:21,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2022-11-25 23:54:21,012 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 35. [2022-11-25 23:54:21,012 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 23 states have (on average 1.7826086956521738) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:21,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-11-25 23:54:21,012 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 7 [2022-11-25 23:54:21,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:21,013 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-11-25 23:54:21,013 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:21,013 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-11-25 23:54:21,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-25 23:54:21,013 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:21,014 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:21,026 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-11-25 23:54:21,214 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:21,215 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:21,215 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:21,215 INFO L85 PathProgramCache]: Analyzing trace with hash 414364089, now seen corresponding path program 1 times [2022-11-25 23:54:21,215 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:21,215 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [212455645] [2022-11-25 23:54:21,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:21,216 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:21,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:21,372 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:21,373 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:21,373 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [212455645] [2022-11-25 23:54:21,373 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [212455645] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:21,373 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [167994158] [2022-11-25 23:54:21,373 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:21,374 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:21,374 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:21,375 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:21,402 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-25 23:54:21,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:21,458 INFO L263 TraceCheckSpWp]: Trace formula consists of 73 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-25 23:54:21,462 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:21,574 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:21,575 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 23:54:21,575 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [167994158] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:21,575 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 23:54:21,575 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 7 [2022-11-25 23:54:21,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [837653226] [2022-11-25 23:54:21,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:21,577 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 23:54:21,577 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:21,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 23:54:21,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-25 23:54:21,578 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:21,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:21,653 INFO L93 Difference]: Finished difference Result 34 states and 40 transitions. [2022-11-25 23:54:21,654 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:54:21,654 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-25 23:54:21,654 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:21,654 INFO L225 Difference]: With dead ends: 34 [2022-11-25 23:54:21,654 INFO L226 Difference]: Without dead ends: 34 [2022-11-25 23:54:21,655 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2022-11-25 23:54:21,655 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 95 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:21,656 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 13 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:54:21,656 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-11-25 23:54:21,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2022-11-25 23:54:21,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 23 states have (on average 1.7391304347826086) internal successors, (40), 33 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:21,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 40 transitions. [2022-11-25 23:54:21,663 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 40 transitions. Word has length 7 [2022-11-25 23:54:21,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:21,667 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 40 transitions. [2022-11-25 23:54:21,668 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:21,668 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 40 transitions. [2022-11-25 23:54:21,668 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-25 23:54:21,669 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:21,669 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:21,675 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:21,874 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:21,875 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:21,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:21,875 INFO L85 PathProgramCache]: Analyzing trace with hash -39615125, now seen corresponding path program 1 times [2022-11-25 23:54:21,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:21,875 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1823566715] [2022-11-25 23:54:21,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:21,876 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:21,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:22,134 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:22,134 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:22,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1823566715] [2022-11-25 23:54:22,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1823566715] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:22,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [152076634] [2022-11-25 23:54:22,135 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:22,135 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:22,136 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:22,137 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:22,165 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-25 23:54:22,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:22,214 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 12 conjunts are in the unsatisfiable core [2022-11-25 23:54:22,216 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:22,252 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:54:22,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 23:54:22,351 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:22,351 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 23:54:22,351 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [152076634] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:22,351 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 23:54:22,352 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 8 [2022-11-25 23:54:22,352 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [954693443] [2022-11-25 23:54:22,352 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:22,352 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 23:54:22,352 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:22,353 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 23:54:22,353 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-25 23:54:22,353 INFO L87 Difference]: Start difference. First operand 34 states and 40 transitions. Second operand has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:22,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:22,457 INFO L93 Difference]: Finished difference Result 59 states and 69 transitions. [2022-11-25 23:54:22,458 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 23:54:22,458 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-25 23:54:22,458 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:22,458 INFO L225 Difference]: With dead ends: 59 [2022-11-25 23:54:22,459 INFO L226 Difference]: Without dead ends: 59 [2022-11-25 23:54:22,459 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=68, Unknown=0, NotChecked=0, Total=110 [2022-11-25 23:54:22,460 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 109 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:22,460 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [109 Valid, 42 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:54:22,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-25 23:54:22,462 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 37. [2022-11-25 23:54:22,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 26 states have (on average 1.6923076923076923) internal successors, (44), 36 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:22,463 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 44 transitions. [2022-11-25 23:54:22,463 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 44 transitions. Word has length 8 [2022-11-25 23:54:22,463 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:22,463 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 44 transitions. [2022-11-25 23:54:22,463 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:22,463 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 44 transitions. [2022-11-25 23:54:22,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-25 23:54:22,464 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:22,464 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1] [2022-11-25 23:54:22,474 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:22,664 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-25 23:54:22,664 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:22,665 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:22,665 INFO L85 PathProgramCache]: Analyzing trace with hash -1327018651, now seen corresponding path program 2 times [2022-11-25 23:54:22,665 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:22,665 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [569080178] [2022-11-25 23:54:22,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:22,665 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:22,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:22,993 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:22,993 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:22,993 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [569080178] [2022-11-25 23:54:22,994 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [569080178] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:22,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1945152901] [2022-11-25 23:54:22,994 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:54:22,994 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:22,999 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:23,000 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:23,019 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-25 23:54:23,074 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2022-11-25 23:54:23,074 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:54:23,075 INFO L263 TraceCheckSpWp]: Trace formula consists of 62 conjuncts, 14 conjunts are in the unsatisfiable core [2022-11-25 23:54:23,077 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:23,133 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:54:23,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 23:54:23,263 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:23,263 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 23:54:23,263 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1945152901] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:23,263 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 23:54:23,264 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 9 [2022-11-25 23:54:23,264 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [59569884] [2022-11-25 23:54:23,264 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:23,264 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 23:54:23,265 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:23,265 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 23:54:23,265 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2022-11-25 23:54:23,266 INFO L87 Difference]: Start difference. First operand 37 states and 44 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:23,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:23,367 INFO L93 Difference]: Finished difference Result 57 states and 67 transitions. [2022-11-25 23:54:23,367 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 23:54:23,367 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-25 23:54:23,367 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:23,368 INFO L225 Difference]: With dead ends: 57 [2022-11-25 23:54:23,368 INFO L226 Difference]: Without dead ends: 57 [2022-11-25 23:54:23,368 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=38, Invalid=94, Unknown=0, NotChecked=0, Total=132 [2022-11-25 23:54:23,369 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 84 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:23,369 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 42 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:54:23,370 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-25 23:54:23,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 35. [2022-11-25 23:54:23,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 25 states have (on average 1.68) internal successors, (42), 34 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:23,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 42 transitions. [2022-11-25 23:54:23,372 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 42 transitions. Word has length 9 [2022-11-25 23:54:23,372 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:23,372 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 42 transitions. [2022-11-25 23:54:23,372 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:23,373 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 42 transitions. [2022-11-25 23:54:23,373 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-25 23:54:23,373 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:23,373 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:23,384 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:23,579 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-25 23:54:23,580 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:23,580 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:23,580 INFO L85 PathProgramCache]: Analyzing trace with hash 584631406, now seen corresponding path program 1 times [2022-11-25 23:54:23,580 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:23,580 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1149714146] [2022-11-25 23:54:23,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:23,581 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:23,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:23,677 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:23,682 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:23,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1149714146] [2022-11-25 23:54:23,683 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1149714146] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:23,683 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:54:23,683 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 23:54:23,683 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617658200] [2022-11-25 23:54:23,684 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:23,684 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:54:23,684 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:23,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:54:23,685 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:54:23,685 INFO L87 Difference]: Start difference. First operand 35 states and 42 transitions. Second operand has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:23,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:23,745 INFO L93 Difference]: Finished difference Result 33 states and 40 transitions. [2022-11-25 23:54:23,746 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:54:23,746 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-25 23:54:23,746 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:23,747 INFO L225 Difference]: With dead ends: 33 [2022-11-25 23:54:23,747 INFO L226 Difference]: Without dead ends: 33 [2022-11-25 23:54:23,747 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 23:54:23,748 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 55 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:23,749 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 19 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:54:23,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-11-25 23:54:23,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 32. [2022-11-25 23:54:23,753 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 25 states have (on average 1.56) internal successors, (39), 31 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:23,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 39 transitions. [2022-11-25 23:54:23,754 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 39 transitions. Word has length 10 [2022-11-25 23:54:23,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:23,754 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 39 transitions. [2022-11-25 23:54:23,754 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:23,754 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 39 transitions. [2022-11-25 23:54:23,756 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-25 23:54:23,756 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:23,756 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:23,756 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-25 23:54:23,757 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:23,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:23,758 INFO L85 PathProgramCache]: Analyzing trace with hash 584631407, now seen corresponding path program 1 times [2022-11-25 23:54:23,758 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:23,758 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1077488468] [2022-11-25 23:54:23,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:23,759 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:23,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:23,935 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:23,935 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:23,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1077488468] [2022-11-25 23:54:23,936 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1077488468] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:23,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [960338122] [2022-11-25 23:54:23,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:23,936 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:23,937 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:23,938 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:23,962 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-25 23:54:24,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:24,028 INFO L263 TraceCheckSpWp]: Trace formula consists of 118 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-25 23:54:24,029 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:24,281 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:24,281 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:24,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-25 23:54:24,558 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:24,558 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [960338122] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:24,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [59701567] [2022-11-25 23:54:24,563 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:54:24,564 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:24,564 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:24,564 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:24,565 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:24,633 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:24,637 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:24,638 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:24,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:24,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:24,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:24,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:54:24,970 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 23:54:24,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 23:54:25,043 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:26,773 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [59701567] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:26,774 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:26,774 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [5, 8, 8] total 25 [2022-11-25 23:54:26,775 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [910970325] [2022-11-25 23:54:26,775 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:26,775 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-25 23:54:26,776 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:26,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-25 23:54:26,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-11-25 23:54:26,777 INFO L87 Difference]: Start difference. First operand 32 states and 39 transitions. Second operand has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:26,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:26,994 INFO L93 Difference]: Finished difference Result 58 states and 69 transitions. [2022-11-25 23:54:26,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-25 23:54:26,995 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-25 23:54:26,995 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:26,995 INFO L225 Difference]: With dead ends: 58 [2022-11-25 23:54:26,996 INFO L226 Difference]: Without dead ends: 58 [2022-11-25 23:54:26,996 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 8 SyntacticMatches, 1 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 127 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-11-25 23:54:26,997 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 102 mSDsluCounter, 41 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:26,997 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 49 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:54:26,998 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-11-25 23:54:26,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 36. [2022-11-25 23:54:27,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 29 states have (on average 1.4827586206896552) internal successors, (43), 35 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:27,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 43 transitions. [2022-11-25 23:54:27,001 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 43 transitions. Word has length 10 [2022-11-25 23:54:27,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:27,001 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 43 transitions. [2022-11-25 23:54:27,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:27,002 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 43 transitions. [2022-11-25 23:54:27,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-25 23:54:27,002 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:27,002 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1] [2022-11-25 23:54:27,016 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-11-25 23:54:27,208 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:27,208 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:27,209 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:27,209 INFO L85 PathProgramCache]: Analyzing trace with hash 340436050, now seen corresponding path program 1 times [2022-11-25 23:54:27,209 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:27,210 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [363245853] [2022-11-25 23:54:27,210 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:27,210 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:27,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:27,389 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 1 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:27,389 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:27,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [363245853] [2022-11-25 23:54:27,390 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [363245853] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:27,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [506283262] [2022-11-25 23:54:27,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:27,390 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:27,391 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:27,395 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:27,414 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-25 23:54:27,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:27,473 INFO L263 TraceCheckSpWp]: Trace formula consists of 101 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-25 23:54:27,474 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:27,584 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:27,585 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:27,683 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:27,684 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [506283262] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:27,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [897186491] [2022-11-25 23:54:27,689 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-25 23:54:27,689 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:27,689 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:27,689 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:27,690 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:27,737 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:27,742 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:27,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:27,799 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:27,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:27,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:27,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:28,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:28,055 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:28,084 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:28,803 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1544#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:28,803 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:28,803 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:28,803 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 16 [2022-11-25 23:54:28,803 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [923787413] [2022-11-25 23:54:28,804 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:28,804 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-25 23:54:28,804 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:28,805 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-25 23:54:28,805 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=405, Unknown=0, NotChecked=0, Total=506 [2022-11-25 23:54:28,805 INFO L87 Difference]: Start difference. First operand 36 states and 43 transitions. Second operand has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:29,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:29,118 INFO L93 Difference]: Finished difference Result 101 states and 117 transitions. [2022-11-25 23:54:29,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-25 23:54:29,119 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-25 23:54:29,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:29,120 INFO L225 Difference]: With dead ends: 101 [2022-11-25 23:54:29,120 INFO L226 Difference]: Without dead ends: 101 [2022-11-25 23:54:29,120 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 15 SyntacticMatches, 2 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=207, Invalid=785, Unknown=0, NotChecked=0, Total=992 [2022-11-25 23:54:29,121 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 350 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 162 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:29,122 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 291 Invalid, 162 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:54:29,122 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2022-11-25 23:54:29,124 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 41. [2022-11-25 23:54:29,124 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 40 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:29,125 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 50 transitions. [2022-11-25 23:54:29,125 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 50 transitions. Word has length 11 [2022-11-25 23:54:29,125 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:29,125 INFO L495 AbstractCegarLoop]: Abstraction has 41 states and 50 transitions. [2022-11-25 23:54:29,126 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:29,126 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 50 transitions. [2022-11-25 23:54:29,126 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-25 23:54:29,126 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:29,126 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:29,139 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:29,332 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-25 23:54:29,332 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:29,333 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:29,333 INFO L85 PathProgramCache]: Analyzing trace with hash -809932952, now seen corresponding path program 1 times [2022-11-25 23:54:29,333 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:29,333 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [320811420] [2022-11-25 23:54:29,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:29,334 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:29,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:29,693 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:29,693 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:29,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [320811420] [2022-11-25 23:54:29,694 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [320811420] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:29,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1115719108] [2022-11-25 23:54:29,694 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:29,694 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:29,694 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:29,699 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:29,722 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-25 23:54:29,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:29,790 INFO L263 TraceCheckSpWp]: Trace formula consists of 129 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-25 23:54:29,792 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:29,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:54:30,058 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:54:30,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 23:54:30,275 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:30,277 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:30,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 10 [2022-11-25 23:54:30,302 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:30,302 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:30,410 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:30,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 25 [2022-11-25 23:54:30,419 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:30,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 36 treesize of output 32 [2022-11-25 23:54:30,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:54:30,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:54:30,684 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:30,684 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1115719108] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:30,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1027567658] [2022-11-25 23:54:30,686 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-25 23:54:30,687 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:30,687 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:30,687 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:30,687 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:30,729 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:30,733 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:30,735 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:30,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:30,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:30,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:30,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:54:31,025 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 23:54:31,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 23:54:31,262 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:33,941 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1802#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-25 23:54:33,942 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:33,942 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:33,942 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 10, 10] total 26 [2022-11-25 23:54:33,942 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1962844259] [2022-11-25 23:54:33,942 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:33,943 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-25 23:54:33,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:33,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-25 23:54:33,944 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=1068, Unknown=0, NotChecked=0, Total=1190 [2022-11-25 23:54:33,944 INFO L87 Difference]: Start difference. First operand 41 states and 50 transitions. Second operand has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:36,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:36,301 INFO L93 Difference]: Finished difference Result 108 states and 121 transitions. [2022-11-25 23:54:36,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-25 23:54:36,302 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-25 23:54:36,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:36,302 INFO L225 Difference]: With dead ends: 108 [2022-11-25 23:54:36,302 INFO L226 Difference]: Without dead ends: 108 [2022-11-25 23:54:36,304 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 662 ImplicationChecksByTransitivity, 5.1s TimeCoverageRelationStatistics Valid=521, Invalid=2785, Unknown=0, NotChecked=0, Total=3306 [2022-11-25 23:54:36,304 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 442 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 500 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 442 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 524 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 500 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:36,305 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [442 Valid, 198 Invalid, 524 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 500 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-25 23:54:36,305 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-11-25 23:54:36,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 59. [2022-11-25 23:54:36,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 52 states have (on average 1.4807692307692308) internal successors, (77), 58 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:36,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 77 transitions. [2022-11-25 23:54:36,309 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 77 transitions. Word has length 12 [2022-11-25 23:54:36,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:36,309 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 77 transitions. [2022-11-25 23:54:36,309 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:36,309 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 77 transitions. [2022-11-25 23:54:36,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-25 23:54:36,310 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:36,310 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 1, 1, 1, 1, 1] [2022-11-25 23:54:36,320 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:36,516 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-11-25 23:54:36,516 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:36,516 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:36,517 INFO L85 PathProgramCache]: Analyzing trace with hash -1868709771, now seen corresponding path program 2 times [2022-11-25 23:54:36,517 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:36,518 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [977846951] [2022-11-25 23:54:36,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:36,520 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:36,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:36,778 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:54:36,779 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:36,779 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [977846951] [2022-11-25 23:54:36,779 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [977846951] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:36,779 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [542954627] [2022-11-25 23:54:36,779 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:54:36,779 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:36,779 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:36,781 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:36,808 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-25 23:54:36,872 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-25 23:54:36,872 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:54:36,873 INFO L263 TraceCheckSpWp]: Trace formula consists of 88 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-25 23:54:36,877 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:36,934 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-25 23:54:36,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-25 23:54:37,233 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:54:37,233 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:37,472 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:54:37,473 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [542954627] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:37,473 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1845675315] [2022-11-25 23:54:37,474 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-25 23:54:37,475 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:37,475 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:37,475 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:37,475 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:37,542 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:37,546 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:37,547 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:37,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:37,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:37,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:37,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:37,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:37,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:37,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:37,900 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:38,673 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2113#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:38,673 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:38,673 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:38,674 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-11-25 23:54:38,674 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2006980252] [2022-11-25 23:54:38,674 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:38,674 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-25 23:54:38,674 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:38,675 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-25 23:54:38,675 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=107, Invalid=399, Unknown=0, NotChecked=0, Total=506 [2022-11-25 23:54:38,676 INFO L87 Difference]: Start difference. First operand 59 states and 77 transitions. Second operand has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:39,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:39,101 INFO L93 Difference]: Finished difference Result 122 states and 164 transitions. [2022-11-25 23:54:39,102 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-25 23:54:39,102 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-25 23:54:39,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:39,103 INFO L225 Difference]: With dead ends: 122 [2022-11-25 23:54:39,103 INFO L226 Difference]: Without dead ends: 122 [2022-11-25 23:54:39,103 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 165 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=194, Invalid=618, Unknown=0, NotChecked=0, Total=812 [2022-11-25 23:54:39,104 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 324 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 169 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 324 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 171 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:39,104 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [324 Valid, 96 Invalid, 171 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 169 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:54:39,105 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122 states. [2022-11-25 23:54:39,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122 to 57. [2022-11-25 23:54:39,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 51 states have (on average 1.4705882352941178) internal successors, (75), 56 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:39,107 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 75 transitions. [2022-11-25 23:54:39,107 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 75 transitions. Word has length 13 [2022-11-25 23:54:39,107 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:39,107 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 75 transitions. [2022-11-25 23:54:39,108 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:39,108 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 75 transitions. [2022-11-25 23:54:39,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-25 23:54:39,108 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:39,108 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:39,118 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:39,309 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-11-25 23:54:39,309 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:39,309 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:39,309 INFO L85 PathProgramCache]: Analyzing trace with hash 661880773, now seen corresponding path program 1 times [2022-11-25 23:54:39,309 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:39,310 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1126909912] [2022-11-25 23:54:39,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:39,310 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:39,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:39,376 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:39,377 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:39,377 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1126909912] [2022-11-25 23:54:39,377 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1126909912] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:39,377 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:54:39,377 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 23:54:39,377 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1722949220] [2022-11-25 23:54:39,378 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:39,378 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:54:39,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:39,379 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:54:39,379 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:54:39,379 INFO L87 Difference]: Start difference. First operand 57 states and 75 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:39,433 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:39,433 INFO L93 Difference]: Finished difference Result 57 states and 73 transitions. [2022-11-25 23:54:39,434 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:54:39,434 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-25 23:54:39,434 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:39,434 INFO L225 Difference]: With dead ends: 57 [2022-11-25 23:54:39,435 INFO L226 Difference]: Without dead ends: 57 [2022-11-25 23:54:39,435 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 23:54:39,435 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 33 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:39,436 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 28 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:54:39,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-25 23:54:39,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 56. [2022-11-25 23:54:39,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 51 states have (on average 1.411764705882353) internal successors, (72), 55 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:39,449 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2022-11-25 23:54:39,450 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 13 [2022-11-25 23:54:39,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:39,452 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2022-11-25 23:54:39,452 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:39,452 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2022-11-25 23:54:39,452 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-25 23:54:39,454 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:39,455 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:39,455 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-11-25 23:54:39,455 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:39,456 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:39,456 INFO L85 PathProgramCache]: Analyzing trace with hash 661880774, now seen corresponding path program 1 times [2022-11-25 23:54:39,456 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:39,456 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1729120701] [2022-11-25 23:54:39,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:39,456 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:39,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:39,649 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:39,649 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:39,649 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1729120701] [2022-11-25 23:54:39,650 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1729120701] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:39,650 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:54:39,650 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 23:54:39,650 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1611684332] [2022-11-25 23:54:39,650 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:39,651 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 23:54:39,651 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:39,652 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 23:54:39,652 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 23:54:39,652 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:39,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:39,768 INFO L93 Difference]: Finished difference Result 65 states and 82 transitions. [2022-11-25 23:54:39,768 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 23:54:39,769 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-25 23:54:39,769 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:39,770 INFO L225 Difference]: With dead ends: 65 [2022-11-25 23:54:39,770 INFO L226 Difference]: Without dead ends: 65 [2022-11-25 23:54:39,771 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=47, Unknown=0, NotChecked=0, Total=72 [2022-11-25 23:54:39,771 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 58 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 23 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:39,771 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 23 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:54:39,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-25 23:54:39,774 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 60. [2022-11-25 23:54:39,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 55 states have (on average 1.3636363636363635) internal successors, (75), 59 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:39,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 75 transitions. [2022-11-25 23:54:39,777 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 75 transitions. Word has length 13 [2022-11-25 23:54:39,777 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:39,777 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 75 transitions. [2022-11-25 23:54:39,778 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:39,778 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 75 transitions. [2022-11-25 23:54:39,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-25 23:54:39,778 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:39,779 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:39,779 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-11-25 23:54:39,779 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:39,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:39,780 INFO L85 PathProgramCache]: Analyzing trace with hash 2003282293, now seen corresponding path program 1 times [2022-11-25 23:54:39,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:39,780 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1908698454] [2022-11-25 23:54:39,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:39,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:39,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:40,082 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:40,083 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:40,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1908698454] [2022-11-25 23:54:40,084 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1908698454] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:40,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [127283189] [2022-11-25 23:54:40,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:40,084 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:40,084 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:40,086 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:40,118 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-25 23:54:40,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:40,192 INFO L263 TraceCheckSpWp]: Trace formula consists of 148 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-25 23:54:40,193 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:40,326 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_279 Int) (|v_ULTIMATE.start_main_#t~malloc11#1.base_21| Int) (|v_ULTIMATE.start_main_#t~malloc12#1.base_21| Int)) (let ((.cse0 (store |c_ULTIMATE.start_main_old_#valid#1| |v_ULTIMATE.start_main_#t~malloc11#1.base_21| 1))) (and (= |c_#valid| (store (store (store .cse0 |v_ULTIMATE.start_main_#t~malloc12#1.base_21| v_ArrVal_279) |v_ULTIMATE.start_main_#t~malloc11#1.base_21| 0) |v_ULTIMATE.start_main_#t~malloc12#1.base_21| 0)) (= (select |c_ULTIMATE.start_main_old_#valid#1| |v_ULTIMATE.start_main_#t~malloc11#1.base_21|) 0) (= (select .cse0 |v_ULTIMATE.start_main_#t~malloc12#1.base_21|) 0)))) is different from true [2022-11-25 23:54:40,327 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-25 23:54:40,327 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 23:54:40,327 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [127283189] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:40,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 23:54:40,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 11 [2022-11-25 23:54:40,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1722467920] [2022-11-25 23:54:40,328 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:40,328 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:54:40,328 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:40,329 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:54:40,329 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=80, Unknown=1, NotChecked=18, Total=132 [2022-11-25 23:54:40,329 INFO L87 Difference]: Start difference. First operand 60 states and 75 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:40,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:40,381 INFO L93 Difference]: Finished difference Result 59 states and 74 transitions. [2022-11-25 23:54:40,381 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:54:40,381 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-25 23:54:40,382 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:40,382 INFO L225 Difference]: With dead ends: 59 [2022-11-25 23:54:40,382 INFO L226 Difference]: Without dead ends: 56 [2022-11-25 23:54:40,382 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=99, Unknown=1, NotChecked=20, Total=156 [2022-11-25 23:54:40,383 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 16 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 27 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:40,383 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 28 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 28 Invalid, 0 Unknown, 27 Unchecked, 0.0s Time] [2022-11-25 23:54:40,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-11-25 23:54:40,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 52. [2022-11-25 23:54:40,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 48 states have (on average 1.2916666666666667) internal successors, (62), 51 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:40,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 62 transitions. [2022-11-25 23:54:40,386 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 62 transitions. Word has length 15 [2022-11-25 23:54:40,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:40,386 INFO L495 AbstractCegarLoop]: Abstraction has 52 states and 62 transitions. [2022-11-25 23:54:40,386 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:40,387 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 62 transitions. [2022-11-25 23:54:40,387 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-25 23:54:40,387 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:40,387 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:40,398 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:40,593 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:40,593 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:40,593 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:40,594 INFO L85 PathProgramCache]: Analyzing trace with hash -1835762402, now seen corresponding path program 2 times [2022-11-25 23:54:40,594 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:40,594 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1721774727] [2022-11-25 23:54:40,594 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:40,594 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:40,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:41,091 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:41,091 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:41,092 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1721774727] [2022-11-25 23:54:41,092 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1721774727] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:41,092 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [839926727] [2022-11-25 23:54:41,092 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:54:41,092 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:41,092 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:41,093 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:41,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-25 23:54:41,205 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 23:54:41,206 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:54:41,208 INFO L263 TraceCheckSpWp]: Trace formula consists of 153 conjuncts, 47 conjunts are in the unsatisfiable core [2022-11-25 23:54:41,210 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:41,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:54:41,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:54:41,570 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 23:54:41,876 INFO L321 Elim1Store]: treesize reduction 11, result has 47.6 percent of original size [2022-11-25 23:54:41,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 20 [2022-11-25 23:54:41,909 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 3 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:41,909 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:42,159 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:42,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 51 treesize of output 37 [2022-11-25 23:54:42,174 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:42,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 61 treesize of output 61 [2022-11-25 23:54:42,199 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:42,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 15 [2022-11-25 23:54:42,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:54:42,635 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:42,635 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [839926727] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:42,635 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2125061710] [2022-11-25 23:54:42,637 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-25 23:54:42,637 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:42,637 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:42,638 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:42,638 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:42,684 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:42,688 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:42,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:42,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:42,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:42,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:42,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:54:42,949 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 23:54:42,949 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 23:54:43,199 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:46,053 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2860#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-25 23:54:46,053 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:46,053 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:46,053 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 13, 13] total 34 [2022-11-25 23:54:46,054 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1605620791] [2022-11-25 23:54:46,054 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:46,054 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-25 23:54:46,054 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:46,055 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-25 23:54:46,056 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=160, Invalid=1646, Unknown=0, NotChecked=0, Total=1806 [2022-11-25 23:54:46,056 INFO L87 Difference]: Start difference. First operand 52 states and 62 transitions. Second operand has 34 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 34 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:50,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:50,860 INFO L93 Difference]: Finished difference Result 119 states and 135 transitions. [2022-11-25 23:54:50,861 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-25 23:54:50,861 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 34 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-25 23:54:50,861 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:50,862 INFO L225 Difference]: With dead ends: 119 [2022-11-25 23:54:50,862 INFO L226 Difference]: Without dead ends: 117 [2022-11-25 23:54:50,863 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 15 SyntacticMatches, 1 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 2 DeprecatedPredicates, 1085 ImplicationChecksByTransitivity, 7.8s TimeCoverageRelationStatistics Valid=733, Invalid=4379, Unknown=0, NotChecked=0, Total=5112 [2022-11-25 23:54:50,864 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 868 mSDsluCounter, 206 mSDsCounter, 0 mSdLazyCounter, 842 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 868 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 860 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 842 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:50,864 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [868 Valid, 220 Invalid, 860 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 842 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-25 23:54:50,865 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-11-25 23:54:50,867 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 66. [2022-11-25 23:54:50,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 62 states have (on average 1.2741935483870968) internal successors, (79), 65 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:50,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 79 transitions. [2022-11-25 23:54:50,868 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 79 transitions. Word has length 16 [2022-11-25 23:54:50,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:50,868 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 79 transitions. [2022-11-25 23:54:50,868 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 34 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:50,868 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 79 transitions. [2022-11-25 23:54:50,869 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-25 23:54:50,869 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:50,869 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:50,875 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:51,075 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:51,075 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:51,075 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:51,075 INFO L85 PathProgramCache]: Analyzing trace with hash -1817780669, now seen corresponding path program 1 times [2022-11-25 23:54:51,075 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:51,076 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1869301922] [2022-11-25 23:54:51,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:51,076 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:51,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:51,339 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:51,339 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:51,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1869301922] [2022-11-25 23:54:51,339 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1869301922] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:51,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [930844482] [2022-11-25 23:54:51,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:51,339 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:51,340 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:51,341 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:51,362 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-25 23:54:51,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:51,447 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-25 23:54:51,450 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:51,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:51,654 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:51,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 17 [2022-11-25 23:54:51,794 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:51,794 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:52,098 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-25 23:54:52,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-25 23:54:52,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 23 [2022-11-25 23:54:52,136 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:52,136 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [930844482] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:52,136 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [161679612] [2022-11-25 23:54:52,140 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 23:54:52,140 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:52,141 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:52,141 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:52,141 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:52,188 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:52,192 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:52,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:52,238 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:52,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:52,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:52,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:54:52,460 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 23:54:52,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 23:54:52,662 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:52,665 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:52,665 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:52,667 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:52,698 INFO L321 Elim1Store]: treesize reduction 89, result has 21.2 percent of original size [2022-11-25 23:54:52,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 8 case distinctions, treesize of input 49 treesize of output 43 [2022-11-25 23:54:52,798 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:52,801 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:52,802 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:52,805 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:54:52,835 INFO L321 Elim1Store]: treesize reduction 89, result has 21.2 percent of original size [2022-11-25 23:54:52,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 8 case distinctions, treesize of input 49 treesize of output 43 [2022-11-25 23:54:52,901 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:56,958 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [161679612] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:56,958 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:56,958 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [8, 8, 8] total 34 [2022-11-25 23:54:56,958 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1637103916] [2022-11-25 23:54:56,958 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:56,959 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-25 23:54:56,962 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:56,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-25 23:54:56,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=181, Invalid=941, Unknown=0, NotChecked=0, Total=1122 [2022-11-25 23:54:56,963 INFO L87 Difference]: Start difference. First operand 66 states and 79 transitions. Second operand has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:57,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:57,249 INFO L93 Difference]: Finished difference Result 122 states and 141 transitions. [2022-11-25 23:54:57,249 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-25 23:54:57,249 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-25 23:54:57,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:57,250 INFO L225 Difference]: With dead ends: 122 [2022-11-25 23:54:57,250 INFO L226 Difference]: Without dead ends: 108 [2022-11-25 23:54:57,251 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 25 SyntacticMatches, 3 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 249 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=181, Invalid=941, Unknown=0, NotChecked=0, Total=1122 [2022-11-25 23:54:57,252 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 64 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 156 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 156 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:57,252 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 62 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 156 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 23:54:57,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-11-25 23:54:57,254 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 73. [2022-11-25 23:54:57,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 69 states have (on average 1.2463768115942029) internal successors, (86), 72 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:57,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 86 transitions. [2022-11-25 23:54:57,255 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 86 transitions. Word has length 18 [2022-11-25 23:54:57,255 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:57,255 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 86 transitions. [2022-11-25 23:54:57,256 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:57,256 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 86 transitions. [2022-11-25 23:54:57,256 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-25 23:54:57,256 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:57,257 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:57,267 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:57,462 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:57,463 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:54:57,463 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:57,463 INFO L85 PathProgramCache]: Analyzing trace with hash -1536674092, now seen corresponding path program 3 times [2022-11-25 23:54:57,463 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:57,463 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1832957638] [2022-11-25 23:54:57,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:57,463 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:57,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:58,016 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:58,016 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:58,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1832957638] [2022-11-25 23:54:58,016 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1832957638] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:58,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1379279629] [2022-11-25 23:54:58,016 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:54:58,016 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:58,016 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:58,018 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:58,042 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-25 23:54:58,137 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:54:58,137 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:54:58,140 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-25 23:54:58,146 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:58,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:54:58,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:54:58,440 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 23:54:58,987 INFO L321 Elim1Store]: treesize reduction 8, result has 74.2 percent of original size [2022-11-25 23:54:58,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 41 treesize of output 37 [2022-11-25 23:54:59,122 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:54:59,122 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:59,715 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:59,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 77 treesize of output 49 [2022-11-25 23:54:59,746 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:59,747 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 86 treesize of output 90 [2022-11-25 23:54:59,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 22 [2022-11-25 23:54:59,777 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-25 23:55:00,058 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 14 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:55:00,058 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1379279629] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:00,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [499840951] [2022-11-25 23:55:00,064 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-25 23:55:00,064 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:00,065 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:00,065 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:00,065 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:00,109 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:00,112 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:00,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:00,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:55:00,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:00,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:00,308 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:55:00,364 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 23:55:00,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 23:55:00,577 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:05,473 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3598#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-25 23:55:05,473 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:05,473 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:05,474 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 16, 13] total 40 [2022-11-25 23:55:05,474 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1164596361] [2022-11-25 23:55:05,474 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:05,474 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-11-25 23:55:05,474 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:05,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-11-25 23:55:05,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=193, Invalid=2256, Unknown=1, NotChecked=0, Total=2450 [2022-11-25 23:55:05,476 INFO L87 Difference]: Start difference. First operand 73 states and 86 transitions. Second operand has 41 states, 40 states have (on average 1.4) internal successors, (56), 41 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:08,190 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-25 23:55:11,554 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-25 23:55:17,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:55:17,424 INFO L93 Difference]: Finished difference Result 203 states and 229 transitions. [2022-11-25 23:55:17,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-11-25 23:55:17,427 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 40 states have (on average 1.4) internal successors, (56), 41 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-25 23:55:17,427 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:55:17,428 INFO L225 Difference]: With dead ends: 203 [2022-11-25 23:55:17,428 INFO L226 Difference]: Without dead ends: 197 [2022-11-25 23:55:17,431 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1847 ImplicationChecksByTransitivity, 12.3s TimeCoverageRelationStatistics Valid=1266, Invalid=7663, Unknown=1, NotChecked=0, Total=8930 [2022-11-25 23:55:17,431 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 1269 mSDsluCounter, 374 mSDsCounter, 0 mSdLazyCounter, 1429 mSolverCounterSat, 53 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1269 SdHoareTripleChecker+Valid, 391 SdHoareTripleChecker+Invalid, 1484 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 1429 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2022-11-25 23:55:17,431 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1269 Valid, 391 Invalid, 1484 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 1429 Invalid, 2 Unknown, 0 Unchecked, 5.9s Time] [2022-11-25 23:55:17,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2022-11-25 23:55:17,434 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 101. [2022-11-25 23:55:17,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 97 states have (on average 1.2577319587628866) internal successors, (122), 100 states have internal predecessors, (122), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:17,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 122 transitions. [2022-11-25 23:55:17,435 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 122 transitions. Word has length 20 [2022-11-25 23:55:17,436 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:55:17,436 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 122 transitions. [2022-11-25 23:55:17,436 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 40 states have (on average 1.4) internal successors, (56), 41 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:17,436 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 122 transitions. [2022-11-25 23:55:17,437 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-25 23:55:17,437 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:55:17,437 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:55:17,443 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-25 23:55:17,642 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:17,643 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:55:17,643 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:55:17,643 INFO L85 PathProgramCache]: Analyzing trace with hash 1986422707, now seen corresponding path program 1 times [2022-11-25 23:55:17,643 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:55:17,643 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1633233125] [2022-11-25 23:55:17,643 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:17,644 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:55:17,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:18,002 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:55:18,003 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:55:18,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1633233125] [2022-11-25 23:55:18,003 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1633233125] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:55:18,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [304342995] [2022-11-25 23:55:18,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:18,004 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:18,004 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:55:18,005 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:55:18,035 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-25 23:55:18,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:18,127 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-25 23:55:18,128 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:55:18,231 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:55:18,231 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:55:18,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:55:18,420 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:55:18,420 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [304342995] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:18,420 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1663028180] [2022-11-25 23:55:18,422 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:55:18,422 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:18,422 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:18,422 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:18,423 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:18,481 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:18,487 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:18,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:18,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:18,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:18,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:18,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:55:18,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:18,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:18,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:18,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:55:18,915 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 23:55:18,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 23:55:19,143 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:55:19,146 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:55:19,148 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:55:19,215 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-25 23:55:19,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-25 23:55:19,429 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:55:19,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:55:19,578 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:55:19,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:55:19,705 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:24,099 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4148#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:55:24,099 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:24,100 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:24,100 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 8] total 20 [2022-11-25 23:55:24,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1504728937] [2022-11-25 23:55:24,100 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:24,100 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-11-25 23:55:24,101 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:24,101 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-11-25 23:55:24,102 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=177, Invalid=1155, Unknown=0, NotChecked=0, Total=1332 [2022-11-25 23:55:24,102 INFO L87 Difference]: Start difference. First operand 101 states and 122 transitions. Second operand has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:24,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:55:24,511 INFO L93 Difference]: Finished difference Result 170 states and 199 transitions. [2022-11-25 23:55:24,512 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-25 23:55:24,512 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-25 23:55:24,512 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:55:24,513 INFO L225 Difference]: With dead ends: 170 [2022-11-25 23:55:24,513 INFO L226 Difference]: Without dead ends: 170 [2022-11-25 23:55:24,514 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 37 SyntacticMatches, 2 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 505 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=275, Invalid=1705, Unknown=0, NotChecked=0, Total=1980 [2022-11-25 23:55:24,514 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 173 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 242 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 246 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 242 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:55:24,514 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 105 Invalid, 246 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 242 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:55:24,515 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2022-11-25 23:55:24,517 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 133. [2022-11-25 23:55:24,517 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 133 states, 129 states have (on average 1.255813953488372) internal successors, (162), 132 states have internal predecessors, (162), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:24,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133 states to 133 states and 162 transitions. [2022-11-25 23:55:24,518 INFO L78 Accepts]: Start accepts. Automaton has 133 states and 162 transitions. Word has length 22 [2022-11-25 23:55:24,518 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:55:24,518 INFO L495 AbstractCegarLoop]: Abstraction has 133 states and 162 transitions. [2022-11-25 23:55:24,518 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:24,519 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 162 transitions. [2022-11-25 23:55:24,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-25 23:55:24,520 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:55:24,520 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:55:24,530 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-25 23:55:24,730 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-25 23:55:24,730 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:55:24,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:55:24,731 INFO L85 PathProgramCache]: Analyzing trace with hash 80499577, now seen corresponding path program 1 times [2022-11-25 23:55:24,731 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:55:24,731 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1038520039] [2022-11-25 23:55:24,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:24,731 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:55:24,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:25,407 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:55:25,407 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:55:25,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1038520039] [2022-11-25 23:55:25,408 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1038520039] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:55:25,408 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1439026273] [2022-11-25 23:55:25,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:25,408 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:25,408 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:55:25,409 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:55:25,441 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-25 23:55:25,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:25,528 INFO L263 TraceCheckSpWp]: Trace formula consists of 190 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-25 23:55:25,530 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:55:25,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:25,797 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:25,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 17 [2022-11-25 23:55:25,948 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-25 23:55:25,948 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:55:26,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-25 23:55:26,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 16 [2022-11-25 23:55:26,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 23 [2022-11-25 23:55:26,348 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-25 23:55:26,348 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1439026273] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:26,348 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [243626383] [2022-11-25 23:55:26,350 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-25 23:55:26,350 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:26,350 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:26,350 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:26,351 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:26,389 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:26,392 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:26,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:26,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:55:26,490 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:26,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:26,569 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:55:26,647 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 23:55:26,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 23:55:26,816 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:55:26,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:55:26,988 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-25 23:55:26,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 120 treesize of output 119 [2022-11-25 23:55:27,212 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:55:27,213 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:55:27,366 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:55:27,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:55:27,492 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:31,436 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4635#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:55:31,436 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:31,436 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:31,436 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 26 [2022-11-25 23:55:31,436 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [755095843] [2022-11-25 23:55:31,436 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:31,438 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-25 23:55:31,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:31,438 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-25 23:55:31,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=1410, Unknown=0, NotChecked=0, Total=1560 [2022-11-25 23:55:31,439 INFO L87 Difference]: Start difference. First operand 133 states and 162 transitions. Second operand has 26 states, 26 states have (on average 2.0384615384615383) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:34,796 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:55:34,796 INFO L93 Difference]: Finished difference Result 194 states and 222 transitions. [2022-11-25 23:55:34,797 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-25 23:55:34,797 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 2.0384615384615383) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-25 23:55:34,797 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:55:34,801 INFO L225 Difference]: With dead ends: 194 [2022-11-25 23:55:34,801 INFO L226 Difference]: Without dead ends: 175 [2022-11-25 23:55:34,803 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 37 SyntacticMatches, 1 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1037 ImplicationChecksByTransitivity, 7.6s TimeCoverageRelationStatistics Valid=660, Invalid=4032, Unknown=0, NotChecked=0, Total=4692 [2022-11-25 23:55:34,805 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 241 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 398 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 241 SdHoareTripleChecker+Valid, 86 SdHoareTripleChecker+Invalid, 406 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 398 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:55:34,805 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [241 Valid, 86 Invalid, 406 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 398 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 23:55:34,806 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2022-11-25 23:55:34,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 109. [2022-11-25 23:55:34,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 105 states have (on average 1.2190476190476192) internal successors, (128), 108 states have internal predecessors, (128), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:34,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 128 transitions. [2022-11-25 23:55:34,809 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 128 transitions. Word has length 22 [2022-11-25 23:55:34,809 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:55:34,809 INFO L495 AbstractCegarLoop]: Abstraction has 109 states and 128 transitions. [2022-11-25 23:55:34,809 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 2.0384615384615383) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:34,810 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 128 transitions. [2022-11-25 23:55:34,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-25 23:55:34,810 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:55:34,810 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:55:34,819 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-11-25 23:55:35,015 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-11-25 23:55:35,015 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:55:35,015 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:55:35,015 INFO L85 PathProgramCache]: Analyzing trace with hash 1214436490, now seen corresponding path program 4 times [2022-11-25 23:55:35,015 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:55:35,015 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1825624636] [2022-11-25 23:55:35,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:35,016 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:55:35,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:35,656 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:55:35,657 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:55:35,657 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1825624636] [2022-11-25 23:55:35,657 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1825624636] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:55:35,657 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1687063063] [2022-11-25 23:55:35,657 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:55:35,657 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:35,657 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:55:35,658 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:55:35,661 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-25 23:55:35,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:35,770 INFO L263 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 62 conjunts are in the unsatisfiable core [2022-11-25 23:55:35,774 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:55:35,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:55:36,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:55:36,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 23:55:41,402 INFO L321 Elim1Store]: treesize reduction 19, result has 53.7 percent of original size [2022-11-25 23:55:41,402 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 51 treesize of output 40 [2022-11-25 23:55:41,439 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 9 proven. 19 refuted. 4 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:55:41,439 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:55:43,709 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:43,710 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 103 treesize of output 61 [2022-11-25 23:55:43,733 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:43,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 111 treesize of output 119 [2022-11-25 23:55:43,770 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:43,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 43 treesize of output 29 [2022-11-25 23:55:44,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:55:44,622 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 16 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:55:44,622 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1687063063] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:44,622 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1330149991] [2022-11-25 23:55:44,624 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-25 23:55:44,624 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:44,624 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:44,625 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:44,625 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:44,660 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:44,664 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:44,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:44,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:55:44,747 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:44,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:55:44,810 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 23:55:44,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 23:55:45,170 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:48,726 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5196#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-25 23:55:48,726 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:48,726 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:48,726 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 18, 18] total 48 [2022-11-25 23:55:48,726 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [298838683] [2022-11-25 23:55:48,726 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:48,727 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-25 23:55:48,727 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:48,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-25 23:55:48,728 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=248, Invalid=3051, Unknown=7, NotChecked=0, Total=3306 [2022-11-25 23:55:48,729 INFO L87 Difference]: Start difference. First operand 109 states and 128 transitions. Second operand has 48 states, 48 states have (on average 1.4375) internal successors, (69), 48 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:09,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:56:09,564 INFO L93 Difference]: Finished difference Result 281 states and 310 transitions. [2022-11-25 23:56:09,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 58 states. [2022-11-25 23:56:09,564 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 1.4375) internal successors, (69), 48 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-25 23:56:09,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:56:09,565 INFO L225 Difference]: With dead ends: 281 [2022-11-25 23:56:09,566 INFO L226 Difference]: Without dead ends: 279 [2022-11-25 23:56:09,568 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 28 SyntacticMatches, 1 SemanticMatches, 111 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2977 ImplicationChecksByTransitivity, 30.5s TimeCoverageRelationStatistics Valid=1710, Invalid=10938, Unknown=8, NotChecked=0, Total=12656 [2022-11-25 23:56:09,569 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 1234 mSDsluCounter, 424 mSDsCounter, 0 mSdLazyCounter, 1986 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1234 SdHoareTripleChecker+Valid, 445 SdHoareTripleChecker+Invalid, 2011 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 1986 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:56:09,569 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1234 Valid, 445 Invalid, 2011 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 1986 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-11-25 23:56:09,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 279 states. [2022-11-25 23:56:09,573 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 279 to 142. [2022-11-25 23:56:09,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 138 states have (on average 1.210144927536232) internal successors, (167), 141 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:09,574 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 167 transitions. [2022-11-25 23:56:09,574 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 167 transitions. Word has length 24 [2022-11-25 23:56:09,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:56:09,575 INFO L495 AbstractCegarLoop]: Abstraction has 142 states and 167 transitions. [2022-11-25 23:56:09,575 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 1.4375) internal successors, (69), 48 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:09,575 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 167 transitions. [2022-11-25 23:56:09,576 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-25 23:56:09,576 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:56:09,576 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:56:09,591 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2022-11-25 23:56:09,781 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:09,781 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:56:09,782 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:56:09,782 INFO L85 PathProgramCache]: Analyzing trace with hash -269170963, now seen corresponding path program 1 times [2022-11-25 23:56:09,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:56:09,782 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [314945463] [2022-11-25 23:56:09,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:56:09,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:56:09,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:10,067 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-25 23:56:10,067 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:56:10,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [314945463] [2022-11-25 23:56:10,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [314945463] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:56:10,067 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:56:10,068 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-25 23:56:10,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1947702139] [2022-11-25 23:56:10,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:56:10,068 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-25 23:56:10,068 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:56:10,068 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-25 23:56:10,069 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-25 23:56:10,069 INFO L87 Difference]: Start difference. First operand 142 states and 167 transitions. Second operand has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:10,199 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:56:10,199 INFO L93 Difference]: Finished difference Result 183 states and 212 transitions. [2022-11-25 23:56:10,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-25 23:56:10,200 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-25 23:56:10,200 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:56:10,201 INFO L225 Difference]: With dead ends: 183 [2022-11-25 23:56:10,201 INFO L226 Difference]: Without dead ends: 145 [2022-11-25 23:56:10,201 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=106, Unknown=0, NotChecked=0, Total=156 [2022-11-25 23:56:10,202 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 48 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 84 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:56:10,202 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 74 Invalid, 84 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:56:10,202 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 145 states. [2022-11-25 23:56:10,204 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 145 to 141. [2022-11-25 23:56:10,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 137 states have (on average 1.2043795620437956) internal successors, (165), 140 states have internal predecessors, (165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:10,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 165 transitions. [2022-11-25 23:56:10,205 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 165 transitions. Word has length 27 [2022-11-25 23:56:10,205 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:56:10,205 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 165 transitions. [2022-11-25 23:56:10,205 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:10,205 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 165 transitions. [2022-11-25 23:56:10,206 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-25 23:56:10,206 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:56:10,206 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:56:10,206 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable25 [2022-11-25 23:56:10,206 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:56:10,208 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:56:10,209 INFO L85 PathProgramCache]: Analyzing trace with hash -1881611658, now seen corresponding path program 2 times [2022-11-25 23:56:10,209 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:56:10,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1066690060] [2022-11-25 23:56:10,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:56:10,209 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:56:10,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:10,520 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 7 proven. 5 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-25 23:56:10,520 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:56:10,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1066690060] [2022-11-25 23:56:10,520 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1066690060] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:56:10,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1848012052] [2022-11-25 23:56:10,520 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:56:10,521 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:10,521 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:56:10,523 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:56:10,550 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-25 23:56:10,801 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 23:56:10,802 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:56:10,804 INFO L263 TraceCheckSpWp]: Trace formula consists of 224 conjuncts, 65 conjunts are in the unsatisfiable core [2022-11-25 23:56:10,807 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:56:10,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:56:10,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:56:11,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-25 23:56:11,215 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:56:11,217 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:11,218 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-25 23:56:11,240 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 8 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:56:11,240 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:56:11,346 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_539 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_539) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) 0)) is different from false [2022-11-25 23:56:11,411 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:11,412 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 23:56:11,418 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:11,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 23:56:11,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-25 23:56:11,612 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 1 not checked. [2022-11-25 23:56:11,612 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1848012052] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:56:11,612 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [979645355] [2022-11-25 23:56:11,613 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:56:11,613 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:56:11,614 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:56:11,614 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:56:11,614 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:56:11,655 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:11,664 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:11,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:56:11,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:11,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:11,779 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:11,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-25 23:56:11,878 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:11,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:12,023 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-25 23:56:12,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-25 23:56:12,195 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-25 23:56:12,196 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-25 23:56:13,339 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:56:13,341 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:56:13,344 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:56:13,434 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-25 23:56:13,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1036 treesize of output 1019 [2022-11-25 23:56:13,737 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-25 23:56:13,742 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-25 23:56:13,754 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-25 23:56:13,766 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-25 23:56:14,113 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-25 23:56:14,186 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:56:14,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:56:14,353 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:56:14,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:56:14,457 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-25 23:56:14,487 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:56:20,769 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6269#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-25 23:56:20,769 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:56:20,769 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:56:20,769 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 14, 13] total 33 [2022-11-25 23:56:20,770 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2089969282] [2022-11-25 23:56:20,770 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:56:20,770 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-25 23:56:20,770 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:56:20,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-25 23:56:20,771 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=193, Invalid=2052, Unknown=15, NotChecked=92, Total=2352 [2022-11-25 23:56:20,772 INFO L87 Difference]: Start difference. First operand 141 states and 165 transitions. Second operand has 33 states, 33 states have (on average 2.090909090909091) internal successors, (69), 33 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:22,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:56:22,294 INFO L93 Difference]: Finished difference Result 240 states and 272 transitions. [2022-11-25 23:56:22,294 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-25 23:56:22,294 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 2.090909090909091) internal successors, (69), 33 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-25 23:56:22,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:56:22,296 INFO L225 Difference]: With dead ends: 240 [2022-11-25 23:56:22,296 INFO L226 Difference]: Without dead ends: 180 [2022-11-25 23:56:22,297 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 42 SyntacticMatches, 1 SemanticMatches, 70 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1275 ImplicationChecksByTransitivity, 8.0s TimeCoverageRelationStatistics Valid=566, Invalid=4393, Unknown=15, NotChecked=138, Total=5112 [2022-11-25 23:56:22,297 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 258 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 462 mSolverCounterSat, 9 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 258 SdHoareTripleChecker+Valid, 152 SdHoareTripleChecker+Invalid, 522 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 462 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 48 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:56:22,298 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [258 Valid, 152 Invalid, 522 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 462 Invalid, 3 Unknown, 48 Unchecked, 0.4s Time] [2022-11-25 23:56:22,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2022-11-25 23:56:22,301 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 172. [2022-11-25 23:56:22,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 168 states have (on average 1.1904761904761905) internal successors, (200), 171 states have internal predecessors, (200), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:22,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 200 transitions. [2022-11-25 23:56:22,302 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 200 transitions. Word has length 27 [2022-11-25 23:56:22,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:56:22,302 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 200 transitions. [2022-11-25 23:56:22,303 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 2.090909090909091) internal successors, (69), 33 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:22,303 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 200 transitions. [2022-11-25 23:56:22,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-25 23:56:22,303 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:56:22,304 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:56:22,309 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-25 23:56:22,509 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-25 23:56:22,509 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:56:22,510 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:56:22,510 INFO L85 PathProgramCache]: Analyzing trace with hash 2038601280, now seen corresponding path program 5 times [2022-11-25 23:56:22,510 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:56:22,510 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1554134666] [2022-11-25 23:56:22,510 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:56:22,510 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:56:22,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:23,308 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:56:23,308 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:56:23,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1554134666] [2022-11-25 23:56:23,308 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1554134666] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:56:23,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [185663405] [2022-11-25 23:56:23,309 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:56:23,309 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:23,309 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:56:23,311 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:56:23,346 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-25 23:56:23,619 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-25 23:56:23,619 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:56:23,622 INFO L263 TraceCheckSpWp]: Trace formula consists of 225 conjuncts, 78 conjunts are in the unsatisfiable core [2022-11-25 23:56:23,624 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:56:23,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:56:23,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:56:23,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 23:56:24,913 INFO L321 Elim1Store]: treesize reduction 16, result has 81.0 percent of original size [2022-11-25 23:56:24,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 6 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 9 case distinctions, treesize of input 52 treesize of output 90 [2022-11-25 23:56:25,115 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 0 proven. 46 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:56:25,115 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:56:26,482 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:26,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 127 treesize of output 71 [2022-11-25 23:56:26,548 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:26,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 6 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 9 case distinctions, treesize of input 132 treesize of output 187 [2022-11-25 23:56:26,569 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-25 23:56:26,612 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:26,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 52 treesize of output 74 [2022-11-25 23:56:27,430 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 0 proven. 25 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:56:27,430 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [185663405] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:56:27,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [222550127] [2022-11-25 23:56:27,431 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-25 23:56:27,432 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:56:27,432 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:56:27,432 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:56:27,432 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:56:27,474 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:27,479 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:27,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:56:27,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:27,560 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:27,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:56:27,626 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 23:56:27,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 23:56:27,948 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:56:31,716 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6955#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-25 23:56:31,717 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:56:31,717 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:56:31,717 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 18, 15] total 48 [2022-11-25 23:56:31,717 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [878844009] [2022-11-25 23:56:31,717 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:56:31,718 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-25 23:56:31,718 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:56:31,718 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-25 23:56:31,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=272, Invalid=3150, Unknown=0, NotChecked=0, Total=3422 [2022-11-25 23:56:31,719 INFO L87 Difference]: Start difference. First operand 172 states and 200 transitions. Second operand has 49 states, 48 states have (on average 1.5) internal successors, (72), 49 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:49,616 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-25 23:57:38,555 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-25 23:57:52,897 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-25 23:58:30,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:58:30,299 INFO L93 Difference]: Finished difference Result 378 states and 422 transitions. [2022-11-25 23:58:30,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 66 states. [2022-11-25 23:58:30,299 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 48 states have (on average 1.5) internal successors, (72), 49 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-25 23:58:30,299 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:58:30,301 INFO L225 Difference]: With dead ends: 378 [2022-11-25 23:58:30,301 INFO L226 Difference]: Without dead ends: 368 [2022-11-25 23:58:30,303 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 121 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3126 ImplicationChecksByTransitivity, 115.7s TimeCoverageRelationStatistics Valid=2150, Invalid=12837, Unknown=19, NotChecked=0, Total=15006 [2022-11-25 23:58:30,303 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 1273 mSDsluCounter, 491 mSDsCounter, 0 mSdLazyCounter, 2461 mSolverCounterSat, 74 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1273 SdHoareTripleChecker+Valid, 515 SdHoareTripleChecker+Invalid, 2538 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 2461 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:58:30,304 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1273 Valid, 515 Invalid, 2538 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 2461 Invalid, 3 Unknown, 0 Unchecked, 9.1s Time] [2022-11-25 23:58:30,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 368 states. [2022-11-25 23:58:30,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 368 to 214. [2022-11-25 23:58:30,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 214 states, 210 states have (on average 1.2) internal successors, (252), 213 states have internal predecessors, (252), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:30,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 252 transitions. [2022-11-25 23:58:30,310 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 252 transitions. Word has length 28 [2022-11-25 23:58:30,311 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:58:30,311 INFO L495 AbstractCegarLoop]: Abstraction has 214 states and 252 transitions. [2022-11-25 23:58:30,311 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 48 states have (on average 1.5) internal successors, (72), 49 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:30,311 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 252 transitions. [2022-11-25 23:58:30,312 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-25 23:58:30,312 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:58:30,312 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:58:30,330 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-25 23:58:30,518 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-25 23:58:30,518 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:58:30,518 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:58:30,518 INFO L85 PathProgramCache]: Analyzing trace with hash -984516838, now seen corresponding path program 1 times [2022-11-25 23:58:30,519 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:58:30,519 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [292813841] [2022-11-25 23:58:30,519 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:58:30,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:58:30,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:58:33,123 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 4 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:58:33,123 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:58:33,123 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [292813841] [2022-11-25 23:58:33,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [292813841] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:58:33,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1523757087] [2022-11-25 23:58:33,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:58:33,124 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:58:33,124 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:58:33,128 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:58:33,135 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-25 23:58:33,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:58:33,260 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 54 conjunts are in the unsatisfiable core [2022-11-25 23:58:33,262 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:58:33,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:58:33,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:58:33,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 23:58:34,323 INFO L321 Elim1Store]: treesize reduction 11, result has 47.6 percent of original size [2022-11-25 23:58:34,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 20 [2022-11-25 23:58:34,374 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 7 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:58:34,374 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:58:34,804 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:58:34,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 53 treesize of output 39 [2022-11-25 23:58:34,828 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:58:34,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 63 [2022-11-25 23:58:34,843 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:58:34,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 15 [2022-11-25 23:58:35,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:58:35,626 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:58:35,627 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1523757087] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:58:35,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [893535187] [2022-11-25 23:58:35,628 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-25 23:58:35,628 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:58:35,629 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:58:35,629 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:58:35,629 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:58:35,671 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:58:35,675 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:58:35,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:58:35,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:35,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:35,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:35,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-25 23:58:35,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:35,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:36,031 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-25 23:58:36,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-25 23:58:36,201 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-25 23:58:36,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-25 23:58:36,897 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-25 23:58:36,925 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-25 23:58:37,027 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:58:37,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:58:37,124 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-25 23:58:37,133 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:58:42,834 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7901#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:58:42,835 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:58:42,835 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:58:42,835 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 16, 16] total 47 [2022-11-25 23:58:42,835 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [422152377] [2022-11-25 23:58:42,835 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:58:42,835 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-25 23:58:42,836 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:58:42,836 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-25 23:58:42,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=254, Invalid=3643, Unknown=9, NotChecked=0, Total=3906 [2022-11-25 23:58:42,837 INFO L87 Difference]: Start difference. First operand 214 states and 252 transitions. Second operand has 48 states, 48 states have (on average 1.5833333333333333) internal successors, (76), 47 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:49,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:58:49,539 INFO L93 Difference]: Finished difference Result 251 states and 289 transitions. [2022-11-25 23:58:49,539 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-25 23:58:49,539 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 1.5833333333333333) internal successors, (76), 47 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-25 23:58:49,539 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:58:49,543 INFO L225 Difference]: With dead ends: 251 [2022-11-25 23:58:49,543 INFO L226 Difference]: Without dead ends: 242 [2022-11-25 23:58:49,544 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 42 SyntacticMatches, 1 SemanticMatches, 91 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 1977 ImplicationChecksByTransitivity, 14.3s TimeCoverageRelationStatistics Valid=1007, Invalid=7540, Unknown=9, NotChecked=0, Total=8556 [2022-11-25 23:58:49,551 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 455 mSDsluCounter, 200 mSDsCounter, 0 mSdLazyCounter, 796 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 455 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 815 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 796 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-25 23:58:49,551 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [455 Valid, 207 Invalid, 815 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 796 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-25 23:58:49,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 242 states. [2022-11-25 23:58:49,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 242 to 195. [2022-11-25 23:58:49,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 195 states, 191 states have (on average 1.198952879581152) internal successors, (229), 194 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:49,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 195 states to 195 states and 229 transitions. [2022-11-25 23:58:49,556 INFO L78 Accepts]: Start accepts. Automaton has 195 states and 229 transitions. Word has length 29 [2022-11-25 23:58:49,556 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:58:49,557 INFO L495 AbstractCegarLoop]: Abstraction has 195 states and 229 transitions. [2022-11-25 23:58:49,557 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 1.5833333333333333) internal successors, (76), 47 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:49,557 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 229 transitions. [2022-11-25 23:58:49,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-25 23:58:49,558 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:58:49,558 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:58:49,567 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-25 23:58:49,763 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-25 23:58:49,764 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:58:49,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:58:49,764 INFO L85 PathProgramCache]: Analyzing trace with hash -1835093626, now seen corresponding path program 3 times [2022-11-25 23:58:49,764 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:58:49,764 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [302646660] [2022-11-25 23:58:49,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:58:49,764 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:58:49,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:58:50,198 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:58:50,198 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:58:50,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [302646660] [2022-11-25 23:58:50,198 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [302646660] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:58:50,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [657991927] [2022-11-25 23:58:50,199 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:58:50,199 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:58:50,199 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:58:50,203 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:58:50,226 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-25 23:58:50,371 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:58:50,371 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:58:50,374 INFO L263 TraceCheckSpWp]: Trace formula consists of 250 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-25 23:58:50,376 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:58:50,394 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:58:50,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 23:58:50,536 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:58:50,536 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:58:50,864 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:58:50,864 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [657991927] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:58:50,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [253249875] [2022-11-25 23:58:50,866 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:58:50,866 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:58:50,866 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:58:50,866 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:58:50,866 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:58:50,913 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:58:50,917 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:58:50,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:58:50,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:50,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:51,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:58:51,077 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-25 23:58:51,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-25 23:58:51,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:51,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:51,241 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-25 23:58:51,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-25 23:58:51,415 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-25 23:58:51,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-25 23:58:52,338 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:58:52,340 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:58:52,344 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:58:52,432 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-25 23:58:52,433 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1032 treesize of output 1029 [2022-11-25 23:58:53,148 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-25 23:58:53,179 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-25 23:58:53,204 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-25 23:58:53,217 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-25 23:58:53,219 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-25 23:58:53,276 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:58:53,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:58:53,408 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:58:53,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:58:53,492 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-25 23:58:53,511 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:58:59,483 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8629#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:58:59,484 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:58:59,484 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:58:59,484 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 10] total 26 [2022-11-25 23:58:59,484 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [872064093] [2022-11-25 23:58:59,484 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:58:59,485 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-25 23:58:59,485 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:58:59,485 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-25 23:58:59,486 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=1616, Unknown=0, NotChecked=0, Total=1806 [2022-11-25 23:58:59,486 INFO L87 Difference]: Start difference. First operand 195 states and 229 transitions. Second operand has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:00,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:59:00,155 INFO L93 Difference]: Finished difference Result 234 states and 262 transitions. [2022-11-25 23:59:00,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-25 23:59:00,156 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-25 23:59:00,156 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:59:00,157 INFO L225 Difference]: With dead ends: 234 [2022-11-25 23:59:00,157 INFO L226 Difference]: Without dead ends: 234 [2022-11-25 23:59:00,158 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 688 ImplicationChecksByTransitivity, 6.7s TimeCoverageRelationStatistics Valid=371, Invalid=2385, Unknown=0, NotChecked=0, Total=2756 [2022-11-25 23:59:00,158 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 208 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 457 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 208 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 459 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 457 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:59:00,158 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [208 Valid, 127 Invalid, 459 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 457 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 23:59:00,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2022-11-25 23:59:00,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 216. [2022-11-25 23:59:00,163 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 216 states, 212 states have (on average 1.1839622641509433) internal successors, (251), 215 states have internal predecessors, (251), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:00,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 251 transitions. [2022-11-25 23:59:00,164 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 251 transitions. Word has length 31 [2022-11-25 23:59:00,164 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:59:00,164 INFO L495 AbstractCegarLoop]: Abstraction has 216 states and 251 transitions. [2022-11-25 23:59:00,164 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:00,165 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 251 transitions. [2022-11-25 23:59:00,165 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-25 23:59:00,165 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:59:00,165 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:59:00,174 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-25 23:59:00,370 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:59:00,371 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:59:00,371 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:59:00,371 INFO L85 PathProgramCache]: Analyzing trace with hash -1877983743, now seen corresponding path program 1 times [2022-11-25 23:59:00,371 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:59:00,371 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [314409942] [2022-11-25 23:59:00,371 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:59:00,371 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:59:00,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:59:01,053 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:59:01,053 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:59:01,053 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [314409942] [2022-11-25 23:59:01,053 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [314409942] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:59:01,053 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [838242534] [2022-11-25 23:59:01,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:59:01,053 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:59:01,053 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:59:01,054 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:59:01,056 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-25 23:59:01,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:59:01,194 INFO L263 TraceCheckSpWp]: Trace formula consists of 265 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-25 23:59:01,196 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:59:01,691 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-25 23:59:01,692 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:59:02,442 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 4 proven. 14 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-25 23:59:02,442 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [838242534] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:59:02,443 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [483108468] [2022-11-25 23:59:02,444 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-25 23:59:02,444 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:59:02,444 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:59:02,444 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:59:02,444 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:59:02,505 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:59:02,510 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:59:02,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:59:02,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:59:02,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:02,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:02,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-25 23:59:02,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:02,747 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:02,856 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-25 23:59:02,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-25 23:59:03,079 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-25 23:59:03,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-25 23:59:03,786 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:03,806 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:03,893 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:59:03,894 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:59:04,045 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-25 23:59:04,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-25 23:59:04,213 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:59:04,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:59:04,340 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:59:04,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:59:04,501 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:04,513 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:59:10,934 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9355#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.base_69| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_68| Int)) (and (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_69|) (= (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_69|) 1) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_68|) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_69|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_68|) 0)) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_69|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_68|)) (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_68| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_69|)))) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:59:10,934 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:59:10,934 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:59:10,934 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 13, 13] total 42 [2022-11-25 23:59:10,934 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [551086146] [2022-11-25 23:59:10,935 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:59:10,935 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-11-25 23:59:10,935 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:59:10,936 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-11-25 23:59:10,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=254, Invalid=3052, Unknown=0, NotChecked=0, Total=3306 [2022-11-25 23:59:10,939 INFO L87 Difference]: Start difference. First operand 216 states and 251 transitions. Second operand has 42 states, 42 states have (on average 2.261904761904762) internal successors, (95), 42 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:13,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:59:13,356 INFO L93 Difference]: Finished difference Result 285 states and 323 transitions. [2022-11-25 23:59:13,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-25 23:59:13,357 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 2.261904761904762) internal successors, (95), 42 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-25 23:59:13,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:59:13,358 INFO L225 Difference]: With dead ends: 285 [2022-11-25 23:59:13,358 INFO L226 Difference]: Without dead ends: 285 [2022-11-25 23:59:13,359 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1150 ImplicationChecksByTransitivity, 9.3s TimeCoverageRelationStatistics Valid=817, Invalid=5825, Unknown=0, NotChecked=0, Total=6642 [2022-11-25 23:59:13,360 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 569 mSDsluCounter, 329 mSDsCounter, 0 mSdLazyCounter, 1075 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 569 SdHoareTripleChecker+Valid, 346 SdHoareTripleChecker+Invalid, 1082 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 1075 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-25 23:59:13,360 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [569 Valid, 346 Invalid, 1082 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 1075 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-25 23:59:13,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 285 states. [2022-11-25 23:59:13,365 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 285 to 273. [2022-11-25 23:59:13,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 269 states have (on average 1.1672862453531598) internal successors, (314), 272 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:13,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 314 transitions. [2022-11-25 23:59:13,366 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 314 transitions. Word has length 34 [2022-11-25 23:59:13,367 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:59:13,367 INFO L495 AbstractCegarLoop]: Abstraction has 273 states and 314 transitions. [2022-11-25 23:59:13,367 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 2.261904761904762) internal successors, (95), 42 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:13,367 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 314 transitions. [2022-11-25 23:59:13,368 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-25 23:59:13,368 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:59:13,368 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:59:13,384 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-25 23:59:13,573 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:59:13,574 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:59:13,574 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:59:13,574 INFO L85 PathProgramCache]: Analyzing trace with hash 1349829763, now seen corresponding path program 4 times [2022-11-25 23:59:13,574 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:59:13,574 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [949453746] [2022-11-25 23:59:13,574 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:59:13,575 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:59:13,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:59:13,890 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:59:13,890 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:59:13,890 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [949453746] [2022-11-25 23:59:13,890 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [949453746] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:59:13,890 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1610997987] [2022-11-25 23:59:13,891 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:59:13,891 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:59:13,891 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:59:13,892 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:59:13,922 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-25 23:59:14,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:59:14,055 INFO L263 TraceCheckSpWp]: Trace formula consists of 282 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-25 23:59:14,057 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:59:14,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:59:14,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:14,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 23:59:14,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 23:59:14,559 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-25 23:59:14,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-25 23:59:14,584 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 8 proven. 17 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:59:14,585 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:59:14,705 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_773 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_773) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) 0)) is different from false [2022-11-25 23:59:14,861 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:59:14,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 23:59:14,867 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:59:14,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 23:59:15,033 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 8 proven. 8 refuted. 0 times theorem prover too weak. 9 trivial. 9 not checked. [2022-11-25 23:59:15,033 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1610997987] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:59:15,033 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [443234754] [2022-11-25 23:59:15,035 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:59:15,035 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:59:15,035 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:59:15,035 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:59:15,035 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:59:15,075 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:59:15,080 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:59:15,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:59:15,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:15,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:15,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:59:15,255 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-25 23:59:15,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-25 23:59:15,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:15,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:15,430 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-25 23:59:15,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-25 23:59:15,614 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-25 23:59:15,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-25 23:59:16,609 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:59:16,611 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:59:16,614 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:59:16,721 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-25 23:59:16,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1036 treesize of output 1019 [2022-11-25 23:59:17,000 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:17,002 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:17,008 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:17,013 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:17,290 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:17,368 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:59:17,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:59:17,500 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:59:17,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:59:17,599 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:17,624 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:59:24,155 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10220#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-25 23:59:24,155 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:59:24,155 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:59:24,155 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 15, 15] total 33 [2022-11-25 23:59:24,155 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1026666597] [2022-11-25 23:59:24,155 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:59:24,156 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-25 23:59:24,156 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:59:24,156 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-25 23:59:24,157 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=186, Invalid=2039, Unknown=35, NotChecked=92, Total=2352 [2022-11-25 23:59:24,157 INFO L87 Difference]: Start difference. First operand 273 states and 314 transitions. Second operand has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 33 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:26,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:59:26,368 INFO L93 Difference]: Finished difference Result 367 states and 408 transitions. [2022-11-25 23:59:26,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-25 23:59:26,368 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 33 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-25 23:59:26,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:59:26,370 INFO L225 Difference]: With dead ends: 367 [2022-11-25 23:59:26,370 INFO L226 Difference]: Without dead ends: 282 [2022-11-25 23:59:26,370 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 147 GetRequests, 68 SyntacticMatches, 3 SemanticMatches, 76 ConstructedPredicates, 1 IntricatePredicates, 2 DeprecatedPredicates, 1582 ImplicationChecksByTransitivity, 8.8s TimeCoverageRelationStatistics Valid=576, Invalid=5244, Unknown=36, NotChecked=150, Total=6006 [2022-11-25 23:59:26,371 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 346 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 757 mSolverCounterSat, 16 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 346 SdHoareTripleChecker+Valid, 366 SdHoareTripleChecker+Invalid, 842 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 757 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 66 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-25 23:59:26,371 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [346 Valid, 366 Invalid, 842 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 757 Invalid, 3 Unknown, 66 Unchecked, 0.6s Time] [2022-11-25 23:59:26,372 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2022-11-25 23:59:26,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2022-11-25 23:59:26,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 260 states, 256 states have (on average 1.1875) internal successors, (304), 259 states have internal predecessors, (304), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:26,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 304 transitions. [2022-11-25 23:59:26,377 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 304 transitions. Word has length 36 [2022-11-25 23:59:26,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:59:26,378 INFO L495 AbstractCegarLoop]: Abstraction has 260 states and 304 transitions. [2022-11-25 23:59:26,378 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 33 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:26,378 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 304 transitions. [2022-11-25 23:59:26,379 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-25 23:59:26,379 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:59:26,379 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:59:26,391 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-25 23:59:26,585 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-11-25 23:59:26,585 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:59:26,585 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:59:26,585 INFO L85 PathProgramCache]: Analyzing trace with hash 738344494, now seen corresponding path program 2 times [2022-11-25 23:59:26,585 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:59:26,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1625851798] [2022-11-25 23:59:26,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:59:26,586 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:59:26,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:59:27,873 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 8 proven. 48 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:59:27,873 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:59:27,873 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1625851798] [2022-11-25 23:59:27,873 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1625851798] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:59:27,873 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1121793856] [2022-11-25 23:59:27,873 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:59:27,874 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:59:27,874 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:59:27,874 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:59:27,877 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-25 23:59:28,132 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-25 23:59:28,133 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:59:28,135 INFO L263 TraceCheckSpWp]: Trace formula consists of 279 conjuncts, 72 conjunts are in the unsatisfiable core [2022-11-25 23:59:28,138 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:59:28,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:59:28,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:59:28,783 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 23:59:29,279 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:59:29,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 17 [2022-11-25 23:59:29,461 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 1 proven. 54 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:59:29,461 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:59:30,191 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:59:30,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-25 23:59:30,199 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:59:30,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-25 23:59:30,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-25 23:59:31,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:59:31,093 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 10 proven. 45 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:59:31,093 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1121793856] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:59:31,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1044123855] [2022-11-25 23:59:31,095 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-25 23:59:31,095 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:59:31,095 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:59:31,096 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:59:31,096 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:59:31,139 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:59:31,141 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:59:31,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:59:31,176 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:31,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:31,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:59:31,310 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-25 23:59:31,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-25 23:59:31,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:31,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:31,482 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-25 23:59:31,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-25 23:59:31,671 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-25 23:59:31,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-25 23:59:32,386 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:32,402 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:32,477 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-25 23:59:32,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-25 23:59:32,549 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-25 23:59:32,560 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:59:38,786 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11199#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:59:38,786 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:59:38,786 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:59:38,786 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 20, 20] total 60 [2022-11-25 23:59:38,787 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [38806388] [2022-11-25 23:59:38,787 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:59:38,787 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 61 states [2022-11-25 23:59:38,787 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:59:38,788 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 61 interpolants. [2022-11-25 23:59:38,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=345, Invalid=5355, Unknown=0, NotChecked=0, Total=5700 [2022-11-25 23:59:38,788 INFO L87 Difference]: Start difference. First operand 260 states and 304 transitions. Second operand has 61 states, 61 states have (on average 1.7868852459016393) internal successors, (109), 60 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:47,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:59:47,527 INFO L93 Difference]: Finished difference Result 568 states and 651 transitions. [2022-11-25 23:59:47,527 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2022-11-25 23:59:47,527 INFO L78 Accepts]: Start accepts. Automaton has has 61 states, 61 states have (on average 1.7868852459016393) internal successors, (109), 60 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-25 23:59:47,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:59:47,530 INFO L225 Difference]: With dead ends: 568 [2022-11-25 23:59:47,530 INFO L226 Difference]: Without dead ends: 568 [2022-11-25 23:59:47,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2835 ImplicationChecksByTransitivity, 15.6s TimeCoverageRelationStatistics Valid=1136, Invalid=12204, Unknown=0, NotChecked=0, Total=13340 [2022-11-25 23:59:47,532 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 699 mSDsluCounter, 840 mSDsCounter, 0 mSdLazyCounter, 2415 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 699 SdHoareTripleChecker+Valid, 872 SdHoareTripleChecker+Invalid, 2450 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 2415 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:59:47,532 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [699 Valid, 872 Invalid, 2450 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 2415 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2022-11-25 23:59:47,533 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 568 states. [2022-11-25 23:59:47,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 568 to 356. [2022-11-25 23:59:47,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 356 states, 352 states have (on average 1.21875) internal successors, (429), 355 states have internal predecessors, (429), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:47,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 429 transitions. [2022-11-25 23:59:47,542 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 429 transitions. Word has length 37 [2022-11-25 23:59:47,542 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:59:47,542 INFO L495 AbstractCegarLoop]: Abstraction has 356 states and 429 transitions. [2022-11-25 23:59:47,542 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 61 states, 61 states have (on average 1.7868852459016393) internal successors, (109), 60 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:59:47,543 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 429 transitions. [2022-11-25 23:59:47,543 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-25 23:59:47,543 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:59:47,544 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:59:47,553 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-25 23:59:47,750 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32,24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:59:47,750 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-25 23:59:47,750 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:59:47,750 INFO L85 PathProgramCache]: Analyzing trace with hash 343772509, now seen corresponding path program 6 times [2022-11-25 23:59:47,750 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:59:47,750 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1822844217] [2022-11-25 23:59:47,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:59:47,751 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:59:47,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:59:48,910 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 0 proven. 125 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:59:48,910 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:59:48,911 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1822844217] [2022-11-25 23:59:48,911 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1822844217] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:59:48,911 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1052756933] [2022-11-25 23:59:48,911 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:59:48,911 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:59:48,911 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:59:48,912 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:59:48,942 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-25 23:59:49,102 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:59:49,103 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:59:49,105 INFO L263 TraceCheckSpWp]: Trace formula consists of 280 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-25 23:59:49,108 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:59:49,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:59:49,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:59:49,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-25 23:59:50,850 INFO L321 Elim1Store]: treesize reduction 23, result has 54.9 percent of original size [2022-11-25 23:59:50,850 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 61 treesize of output 50 [2022-11-25 23:59:50,908 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 55 proven. 45 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:59:50,908 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:59:51,915 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:59:51,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 129 treesize of output 73 [2022-11-25 23:59:51,950 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:59:51,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 136 treesize of output 148 [2022-11-25 23:59:51,992 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 54 treesize of output 36 [2022-11-25 23:59:53,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:59:53,306 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 75 proven. 25 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:59:53,306 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1052756933] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:59:53,307 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [979035954] [2022-11-25 23:59:53,308 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-25 23:59:53,309 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:59:53,309 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:59:53,310 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:59:53,310 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:59:53,348 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:59:53,356 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:59:53,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:59:53,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:59:53,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:53,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:59:53,531 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-25 23:59:53,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-25 23:59:53,849 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:59:58,210 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12504#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-25 23:59:58,210 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:59:58,210 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:59:58,210 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 22, 22] total 64 [2022-11-25 23:59:58,210 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [870183897] [2022-11-25 23:59:58,211 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:59:58,211 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 64 states [2022-11-25 23:59:58,211 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:59:58,212 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2022-11-25 23:59:58,212 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=284, Invalid=5103, Unknown=15, NotChecked=0, Total=5402 [2022-11-25 23:59:58,213 INFO L87 Difference]: Start difference. First operand 356 states and 429 transitions. Second operand has 64 states, 64 states have (on average 1.453125) internal successors, (93), 64 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:00:29,398 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:00:29,399 INFO L93 Difference]: Finished difference Result 603 states and 658 transitions. [2022-11-26 00:00:29,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 78 states. [2022-11-26 00:00:29,399 INFO L78 Accepts]: Start accepts. Automaton has has 64 states, 64 states have (on average 1.453125) internal successors, (93), 64 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-26 00:00:29,399 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:00:29,401 INFO L225 Difference]: With dead ends: 603 [2022-11-26 00:00:29,401 INFO L226 Difference]: Without dead ends: 575 [2022-11-26 00:00:29,403 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 210 GetRequests, 62 SyntacticMatches, 1 SemanticMatches, 147 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4576 ImplicationChecksByTransitivity, 33.5s TimeCoverageRelationStatistics Valid=2082, Invalid=19955, Unknown=15, NotChecked=0, Total=22052 [2022-11-26 00:00:29,404 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 2087 mSDsluCounter, 2052 mSDsCounter, 0 mSdLazyCounter, 5429 mSolverCounterSat, 165 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2087 SdHoareTripleChecker+Valid, 2108 SdHoareTripleChecker+Invalid, 5595 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 165 IncrementalHoareTripleChecker+Valid, 5429 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.6s IncrementalHoareTripleChecker+Time [2022-11-26 00:00:29,404 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2087 Valid, 2108 Invalid, 5595 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [165 Valid, 5429 Invalid, 1 Unknown, 0 Unchecked, 5.6s Time] [2022-11-26 00:00:29,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 575 states. [2022-11-26 00:00:29,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 575 to 447. [2022-11-26 00:00:29,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 447 states, 443 states have (on average 1.1738148984198646) internal successors, (520), 446 states have internal predecessors, (520), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:00:29,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 447 states to 447 states and 520 transitions. [2022-11-26 00:00:29,430 INFO L78 Accepts]: Start accepts. Automaton has 447 states and 520 transitions. Word has length 38 [2022-11-26 00:00:29,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:00:29,430 INFO L495 AbstractCegarLoop]: Abstraction has 447 states and 520 transitions. [2022-11-26 00:00:29,433 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 64 states, 64 states have (on average 1.453125) internal successors, (93), 64 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:00:29,433 INFO L276 IsEmpty]: Start isEmpty. Operand 447 states and 520 transitions. [2022-11-26 00:00:29,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-26 00:00:29,434 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:00:29,435 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:00:29,443 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-26 00:00:29,640 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33,25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:00:29,640 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-26 00:00:29,641 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:00:29,641 INFO L85 PathProgramCache]: Analyzing trace with hash 565573687, now seen corresponding path program 2 times [2022-11-26 00:00:29,641 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:00:29,641 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [923408111] [2022-11-26 00:00:29,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:00:29,641 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:00:29,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:00:30,885 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 12 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:00:30,885 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:00:30,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [923408111] [2022-11-26 00:00:30,886 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [923408111] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:00:30,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1576223983] [2022-11-26 00:00:30,886 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:00:30,886 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:00:30,886 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:00:30,887 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:00:30,906 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-26 00:00:31,398 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-26 00:00:31,398 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:00:31,401 INFO L263 TraceCheckSpWp]: Trace formula consists of 276 conjuncts, 83 conjunts are in the unsatisfiable core [2022-11-26 00:00:31,404 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:00:31,457 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-26 00:00:31,457 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-26 00:00:31,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:00:32,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-26 00:00:32,282 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 26 [2022-11-26 00:00:32,665 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:00:32,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-26 00:00:33,185 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 7 proven. 24 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-26 00:00:33,185 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:00:34,306 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:00:34,306 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 25 [2022-11-26 00:00:34,327 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:00:34,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 36 treesize of output 35 [2022-11-26 00:00:34,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 7 [2022-11-26 00:00:35,976 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:00:35,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:00:36,091 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 7 proven. 24 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-26 00:00:36,091 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1576223983] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:00:36,092 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1560760454] [2022-11-26 00:00:36,093 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-26 00:00:36,093 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:00:36,093 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:00:36,093 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:00:36,094 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:00:36,138 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:00:36,142 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:00:36,143 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:00:36,177 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:36,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:36,250 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:36,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-26 00:00:36,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:36,372 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:36,467 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-26 00:00:36,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-26 00:00:36,650 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-26 00:00:36,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-26 00:00:37,370 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-26 00:00:37,379 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-26 00:00:37,491 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:00:37,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:00:37,620 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-26 00:00:37,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-26 00:00:37,794 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:00:37,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:00:37,942 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:00:37,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:00:38,111 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-26 00:00:38,124 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:00:45,654 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13993#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:00:45,654 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:00:45,654 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:00:45,655 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 56 [2022-11-26 00:00:45,655 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [620786074] [2022-11-26 00:00:45,655 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:00:45,655 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-11-26 00:00:45,655 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:00:45,656 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-11-26 00:00:45,656 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=410, Invalid=4846, Unknown=0, NotChecked=0, Total=5256 [2022-11-26 00:00:45,657 INFO L87 Difference]: Start difference. First operand 447 states and 520 transitions. Second operand has 57 states, 57 states have (on average 1.894736842105263) internal successors, (108), 56 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:04,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:01:04,742 INFO L93 Difference]: Finished difference Result 574 states and 667 transitions. [2022-11-26 00:01:04,743 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 73 states. [2022-11-26 00:01:04,746 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 57 states have (on average 1.894736842105263) internal successors, (108), 56 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-26 00:01:04,747 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:01:04,748 INFO L225 Difference]: With dead ends: 574 [2022-11-26 00:01:04,749 INFO L226 Difference]: Without dead ends: 547 [2022-11-26 00:01:04,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 59 SyntacticMatches, 0 SemanticMatches, 141 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5130 ImplicationChecksByTransitivity, 27.9s TimeCoverageRelationStatistics Valid=3238, Invalid=17068, Unknown=0, NotChecked=0, Total=20306 [2022-11-26 00:01:04,750 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 1447 mSDsluCounter, 240 mSDsCounter, 0 mSdLazyCounter, 1535 mSolverCounterSat, 106 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1447 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 1641 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 106 IncrementalHoareTripleChecker+Valid, 1535 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-26 00:01:04,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1447 Valid, 252 Invalid, 1641 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [106 Valid, 1535 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-11-26 00:01:04,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 547 states. [2022-11-26 00:01:04,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 547 to 481. [2022-11-26 00:01:04,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 481 states, 477 states have (on average 1.1719077568134173) internal successors, (559), 480 states have internal predecessors, (559), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:04,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 481 states to 481 states and 559 transitions. [2022-11-26 00:01:04,761 INFO L78 Accepts]: Start accepts. Automaton has 481 states and 559 transitions. Word has length 38 [2022-11-26 00:01:04,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:01:04,761 INFO L495 AbstractCegarLoop]: Abstraction has 481 states and 559 transitions. [2022-11-26 00:01:04,762 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 57 states have (on average 1.894736842105263) internal successors, (108), 56 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:04,762 INFO L276 IsEmpty]: Start isEmpty. Operand 481 states and 559 transitions. [2022-11-26 00:01:04,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-26 00:01:04,763 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:01:04,763 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:01:04,774 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-26 00:01:04,969 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-26 00:01:04,970 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-26 00:01:04,970 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:01:04,970 INFO L85 PathProgramCache]: Analyzing trace with hash -897604463, now seen corresponding path program 3 times [2022-11-26 00:01:04,970 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:01:04,970 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1041095224] [2022-11-26 00:01:04,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:01:04,971 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:01:04,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:01:05,964 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 16 proven. 50 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-26 00:01:05,964 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:01:05,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1041095224] [2022-11-26 00:01:05,965 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1041095224] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:01:05,965 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [371315491] [2022-11-26 00:01:05,965 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:01:05,965 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:01:05,965 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:01:05,966 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:01:05,968 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-26 00:01:06,180 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:01:06,181 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:01:06,184 INFO L263 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 100 conjunts are in the unsatisfiable core [2022-11-26 00:01:06,186 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:01:06,206 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-26 00:01:06,206 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-26 00:01:06,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:01:07,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-26 00:01:07,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 27 [2022-11-26 00:01:08,327 INFO L321 Elim1Store]: treesize reduction 12, result has 81.8 percent of original size [2022-11-26 00:01:08,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 7 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 49 treesize of output 72 [2022-11-26 00:01:08,725 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 0 proven. 67 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:01:08,725 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:01:09,871 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:01:09,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 105 treesize of output 63 [2022-11-26 00:01:09,899 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:01:09,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 115 treesize of output 121 [2022-11-26 00:01:09,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 45 treesize of output 29 [2022-11-26 00:01:12,122 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 1 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:01:12,123 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [371315491] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:01:12,123 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1131777718] [2022-11-26 00:01:12,124 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-26 00:01:12,124 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:01:12,124 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:01:12,125 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:01:12,125 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:01:12,163 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:01:12,166 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:01:12,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:01:12,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:12,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:12,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:01:12,318 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:01:12,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-26 00:01:12,369 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:12,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:12,485 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-26 00:01:12,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-26 00:01:12,671 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-26 00:01:12,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-26 00:01:13,368 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-26 00:01:13,378 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-26 00:01:13,469 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:01:13,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:01:13,538 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-26 00:01:13,551 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:01:19,800 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15500#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:01:19,801 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:01:19,801 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:01:19,801 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 25, 25] total 67 [2022-11-26 00:01:19,801 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2103184955] [2022-11-26 00:01:19,801 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:01:19,801 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 68 states [2022-11-26 00:01:19,802 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:01:19,802 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 68 interpolants. [2022-11-26 00:01:19,803 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=508, Invalid=6298, Unknown=0, NotChecked=0, Total=6806 [2022-11-26 00:01:19,803 INFO L87 Difference]: Start difference. First operand 481 states and 559 transitions. Second operand has 68 states, 67 states have (on average 1.7164179104477613) internal successors, (115), 68 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:38,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:01:38,372 INFO L93 Difference]: Finished difference Result 861 states and 974 transitions. [2022-11-26 00:01:38,373 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 78 states. [2022-11-26 00:01:38,373 INFO L78 Accepts]: Start accepts. Automaton has has 68 states, 67 states have (on average 1.7164179104477613) internal successors, (115), 68 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-26 00:01:38,373 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:01:38,375 INFO L225 Difference]: With dead ends: 861 [2022-11-26 00:01:38,375 INFO L226 Difference]: Without dead ends: 822 [2022-11-26 00:01:38,377 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 207 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 154 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6935 ImplicationChecksByTransitivity, 25.2s TimeCoverageRelationStatistics Valid=3146, Invalid=21034, Unknown=0, NotChecked=0, Total=24180 [2022-11-26 00:01:38,377 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 2323 mSDsluCounter, 579 mSDsCounter, 0 mSdLazyCounter, 3379 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2323 SdHoareTripleChecker+Valid, 600 SdHoareTripleChecker+Invalid, 3451 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 3379 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2022-11-26 00:01:38,377 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2323 Valid, 600 Invalid, 3451 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 3379 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2022-11-26 00:01:38,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 822 states. [2022-11-26 00:01:38,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 822 to 555. [2022-11-26 00:01:38,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 555 states, 551 states have (on average 1.1651542649727769) internal successors, (642), 554 states have internal predecessors, (642), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:38,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 555 states to 555 states and 642 transitions. [2022-11-26 00:01:38,390 INFO L78 Accepts]: Start accepts. Automaton has 555 states and 642 transitions. Word has length 39 [2022-11-26 00:01:38,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:01:38,390 INFO L495 AbstractCegarLoop]: Abstraction has 555 states and 642 transitions. [2022-11-26 00:01:38,391 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 68 states, 67 states have (on average 1.7164179104477613) internal successors, (115), 68 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:38,391 INFO L276 IsEmpty]: Start isEmpty. Operand 555 states and 642 transitions. [2022-11-26 00:01:38,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-26 00:01:38,392 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:01:38,392 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:01:38,404 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-26 00:01:38,598 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-26 00:01:38,598 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-26 00:01:38,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:01:38,599 INFO L85 PathProgramCache]: Analyzing trace with hash 1168962394, now seen corresponding path program 7 times [2022-11-26 00:01:38,599 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:01:38,599 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [749371488] [2022-11-26 00:01:38,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:01:38,599 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:01:38,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:01:39,950 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 0 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:01:39,950 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:01:39,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [749371488] [2022-11-26 00:01:39,951 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [749371488] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:01:39,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [28776925] [2022-11-26 00:01:39,951 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:01:39,951 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:01:39,951 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:01:39,952 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:01:39,958 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-26 00:01:40,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:01:40,125 INFO L263 TraceCheckSpWp]: Trace formula consists of 293 conjuncts, 89 conjunts are in the unsatisfiable core [2022-11-26 00:01:40,128 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:01:40,178 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:01:40,891 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-26 00:01:40,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-26 00:01:42,573 INFO L321 Elim1Store]: treesize reduction 27, result has 55.7 percent of original size [2022-11-26 00:01:42,573 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 71 treesize of output 60 [2022-11-26 00:01:42,649 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 54 proven. 66 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-26 00:01:42,650 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:01:44,042 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:01:44,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 155 treesize of output 85 [2022-11-26 00:01:44,078 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:01:44,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 161 treesize of output 177 [2022-11-26 00:01:44,086 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 15 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 0 case distinctions, treesize of input 65 treesize of output 43 [2022-11-26 00:01:46,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:01:46,320 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-26 00:01:46,361 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 84 proven. 36 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-26 00:01:46,362 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [28776925] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:01:46,362 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [697172105] [2022-11-26 00:01:46,363 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-26 00:01:46,363 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:01:46,363 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:01:46,363 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:01:46,363 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:01:46,406 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:01:46,409 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:01:46,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:01:46,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:46,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:46,517 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-26 00:01:46,564 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-26 00:01:46,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-26 00:01:46,897 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:01:51,436 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17380#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-26 00:01:51,436 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:01:51,436 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:01:51,436 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 24, 24] total 69 [2022-11-26 00:01:51,436 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [631081696] [2022-11-26 00:01:51,436 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:01:51,436 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 69 states [2022-11-26 00:01:51,437 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:01:51,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 69 interpolants. [2022-11-26 00:01:51,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=369, Invalid=5793, Unknown=0, NotChecked=0, Total=6162 [2022-11-26 00:01:51,438 INFO L87 Difference]: Start difference. First operand 555 states and 642 transitions. Second operand has 69 states, 69 states have (on average 1.4927536231884058) internal successors, (103), 69 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:32,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:02:32,228 INFO L93 Difference]: Finished difference Result 825 states and 891 transitions. [2022-11-26 00:02:32,228 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 112 states. [2022-11-26 00:02:32,228 INFO L78 Accepts]: Start accepts. Automaton has has 69 states, 69 states have (on average 1.4927536231884058) internal successors, (103), 69 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-26 00:02:32,229 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:02:32,232 INFO L225 Difference]: With dead ends: 825 [2022-11-26 00:02:32,232 INFO L226 Difference]: Without dead ends: 794 [2022-11-26 00:02:32,235 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 251 GetRequests, 64 SyntacticMatches, 1 SemanticMatches, 186 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8347 ImplicationChecksByTransitivity, 45.4s TimeCoverageRelationStatistics Valid=4355, Invalid=30801, Unknown=0, NotChecked=0, Total=35156 [2022-11-26 00:02:32,235 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 2091 mSDsluCounter, 1803 mSDsCounter, 0 mSdLazyCounter, 4877 mSolverCounterSat, 132 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2091 SdHoareTripleChecker+Valid, 1865 SdHoareTripleChecker+Invalid, 5009 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 132 IncrementalHoareTripleChecker+Valid, 4877 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.8s IncrementalHoareTripleChecker+Time [2022-11-26 00:02:32,236 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2091 Valid, 1865 Invalid, 5009 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [132 Valid, 4877 Invalid, 0 Unknown, 0 Unchecked, 4.8s Time] [2022-11-26 00:02:32,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 794 states. [2022-11-26 00:02:32,246 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 794 to 633. [2022-11-26 00:02:32,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 633 states, 629 states have (on average 1.1478537360890302) internal successors, (722), 632 states have internal predecessors, (722), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:32,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 633 states to 633 states and 722 transitions. [2022-11-26 00:02:32,248 INFO L78 Accepts]: Start accepts. Automaton has 633 states and 722 transitions. Word has length 40 [2022-11-26 00:02:32,248 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:02:32,248 INFO L495 AbstractCegarLoop]: Abstraction has 633 states and 722 transitions. [2022-11-26 00:02:32,248 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 69 states, 69 states have (on average 1.4927536231884058) internal successors, (103), 69 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:32,249 INFO L276 IsEmpty]: Start isEmpty. Operand 633 states and 722 transitions. [2022-11-26 00:02:32,249 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-26 00:02:32,250 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:02:32,250 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:02:32,257 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-26 00:02:32,456 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable36,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:02:32,456 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-26 00:02:32,456 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:02:32,457 INFO L85 PathProgramCache]: Analyzing trace with hash 1651924211, now seen corresponding path program 5 times [2022-11-26 00:02:32,457 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:02:32,457 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1847027048] [2022-11-26 00:02:32,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:02:32,457 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:02:32,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:02:32,935 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 1 proven. 29 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-26 00:02:32,935 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:02:32,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1847027048] [2022-11-26 00:02:32,935 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1847027048] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:02:32,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1316369861] [2022-11-26 00:02:32,936 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:02:32,936 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:02:32,936 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:02:32,937 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:02:32,939 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-26 00:02:33,197 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-26 00:02:33,197 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:02:33,200 INFO L263 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-26 00:02:33,201 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:02:33,214 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:02:33,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 00:02:33,476 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 4 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-26 00:02:33,476 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:02:33,923 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 4 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-26 00:02:33,923 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1316369861] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:02:33,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1761064199] [2022-11-26 00:02:33,924 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-26 00:02:33,925 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:02:33,925 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:02:33,925 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:02:33,925 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:02:33,958 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:02:33,963 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:02:33,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:02:33,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:34,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:34,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:34,118 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-26 00:02:34,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:34,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:34,293 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-26 00:02:34,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-26 00:02:34,467 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-26 00:02:34,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-26 00:02:35,406 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:02:35,408 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:02:35,412 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:02:35,506 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-26 00:02:35,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1026 treesize of output 1019 [2022-11-26 00:02:35,765 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-26 00:02:35,767 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-26 00:02:35,773 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-26 00:02:35,790 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-26 00:02:36,114 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-26 00:02:36,170 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:02:36,170 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:02:36,311 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:02:36,312 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:02:36,402 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-26 00:02:36,421 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:02:43,484 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19336#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-26 00:02:43,485 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:02:43,485 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:02:43,485 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 35 [2022-11-26 00:02:43,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1221781526] [2022-11-26 00:02:43,485 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:02:43,485 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-26 00:02:43,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:02:43,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-26 00:02:43,486 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=273, Invalid=2379, Unknown=0, NotChecked=0, Total=2652 [2022-11-26 00:02:43,487 INFO L87 Difference]: Start difference. First operand 633 states and 722 transitions. Second operand has 36 states, 35 states have (on average 2.7714285714285714) internal successors, (97), 36 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:44,447 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:02:44,448 INFO L93 Difference]: Finished difference Result 717 states and 793 transitions. [2022-11-26 00:02:44,448 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-26 00:02:44,448 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 35 states have (on average 2.7714285714285714) internal successors, (97), 36 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-26 00:02:44,448 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:02:44,451 INFO L225 Difference]: With dead ends: 717 [2022-11-26 00:02:44,451 INFO L226 Difference]: Without dead ends: 717 [2022-11-26 00:02:44,451 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1112 ImplicationChecksByTransitivity, 8.1s TimeCoverageRelationStatistics Valid=573, Invalid=3587, Unknown=0, NotChecked=0, Total=4160 [2022-11-26 00:02:44,452 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 432 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 660 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 432 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 662 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 660 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:02:44,452 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [432 Valid, 224 Invalid, 662 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 660 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-26 00:02:44,453 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 717 states. [2022-11-26 00:02:44,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 717 to 675. [2022-11-26 00:02:44,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 675 states, 671 states have (on average 1.1326378539493294) internal successors, (760), 674 states have internal predecessors, (760), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:44,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 675 states to 675 states and 760 transitions. [2022-11-26 00:02:44,467 INFO L78 Accepts]: Start accepts. Automaton has 675 states and 760 transitions. Word has length 40 [2022-11-26 00:02:44,467 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:02:44,467 INFO L495 AbstractCegarLoop]: Abstraction has 675 states and 760 transitions. [2022-11-26 00:02:44,467 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 35 states have (on average 2.7714285714285714) internal successors, (97), 36 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:02:44,467 INFO L276 IsEmpty]: Start isEmpty. Operand 675 states and 760 transitions. [2022-11-26 00:02:44,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-26 00:02:44,469 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:02:44,469 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:02:44,479 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-26 00:02:44,675 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-26 00:02:44,675 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-26 00:02:44,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:02:44,675 INFO L85 PathProgramCache]: Analyzing trace with hash -392507881, now seen corresponding path program 8 times [2022-11-26 00:02:44,675 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:02:44,676 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1366985069] [2022-11-26 00:02:44,676 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:02:44,676 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:02:44,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:02:46,109 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 0 proven. 149 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:02:46,109 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:02:46,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1366985069] [2022-11-26 00:02:46,109 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1366985069] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:02:46,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1975747791] [2022-11-26 00:02:46,110 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:02:46,110 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:02:46,110 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:02:46,111 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:02:46,113 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-26 00:02:46,408 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-11-26 00:02:46,409 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:02:46,412 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 92 conjunts are in the unsatisfiable core [2022-11-26 00:02:46,415 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:02:46,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:02:46,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 00:02:47,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 16 [2022-11-26 00:02:54,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 25 [2022-11-26 00:02:56,197 INFO L321 Elim1Store]: treesize reduction 4, result has 86.7 percent of original size [2022-11-26 00:02:56,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 31 treesize of output 36 [2022-11-26 00:02:56,603 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 23 proven. 126 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:02:56,603 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:02:57,858 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:02:57,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 51 treesize of output 37 [2022-11-26 00:02:57,875 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:02:57,875 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 61 treesize of output 61 [2022-11-26 00:02:57,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 15 [2022-11-26 00:02:59,692 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:02:59,698 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:02:59,700 WARN L207 Elim1Store]: Array PQE input equivalent to true [2022-11-26 00:02:59,701 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 60 proven. 89 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:02:59,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1975747791] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:02:59,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2141763337] [2022-11-26 00:02:59,702 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-26 00:02:59,703 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:02:59,703 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:02:59,703 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:02:59,703 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:02:59,753 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:02:59,758 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:02:59,758 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:02:59,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:02:59,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:02:59,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-26 00:02:59,894 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-26 00:02:59,894 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-26 00:03:00,194 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:03:04,824 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21091#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-26 00:03:04,824 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:03:04,824 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:03:04,824 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 26, 26] total 75 [2022-11-26 00:03:04,824 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [26438808] [2022-11-26 00:03:04,825 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:03:04,825 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 75 states [2022-11-26 00:03:04,825 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:03:04,825 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 75 interpolants. [2022-11-26 00:03:04,826 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=578, Invalid=6554, Unknown=8, NotChecked=0, Total=7140 [2022-11-26 00:03:04,826 INFO L87 Difference]: Start difference. First operand 675 states and 760 transitions. Second operand has 75 states, 75 states have (on average 1.64) internal successors, (123), 75 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:03:10,929 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.20s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:03:12,150 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.19s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:03:18,839 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.32s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:03:21,494 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2022-11-26 00:03:48,999 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:03:57,523 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.11s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:04:00,100 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.15s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:04:02,387 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:04:10,127 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:04:28,357 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:04:36,057 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:04:37,179 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.10s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:04:47,291 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.12s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:04:55,444 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.06s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:05:04,637 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:05:05,703 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:05:26,105 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:05:31,995 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.06s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:05,349 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:06,684 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.11s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:07,957 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.20s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:12,467 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.25s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:22,763 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.06s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:29,717 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.09s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:30,804 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:38,369 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:40,835 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:42,515 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:49,047 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:54,086 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.09s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:06:58,410 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:07:03,074 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.20s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:07:08,332 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.11s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:07:14,328 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.26s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:07:26,316 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.22s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:07:34,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:07:34,041 INFO L93 Difference]: Finished difference Result 1742 states and 1888 transitions. [2022-11-26 00:07:34,042 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 243 states. [2022-11-26 00:07:34,042 INFO L78 Accepts]: Start accepts. Automaton has has 75 states, 75 states have (on average 1.64) internal successors, (123), 75 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-26 00:07:34,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:07:34,047 INFO L225 Difference]: With dead ends: 1742 [2022-11-26 00:07:34,047 INFO L226 Difference]: Without dead ends: 1685 [2022-11-26 00:07:34,050 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 389 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 323 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34489 ImplicationChecksByTransitivity, 215.0s TimeCoverageRelationStatistics Valid=10287, Invalid=94920, Unknown=93, NotChecked=0, Total=105300 [2022-11-26 00:07:34,051 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 4733 mSDsluCounter, 5351 mSDsCounter, 0 mSdLazyCounter, 12258 mSolverCounterSat, 636 mSolverCounterUnsat, 44 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 69.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4733 SdHoareTripleChecker+Valid, 5493 SdHoareTripleChecker+Invalid, 12938 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 636 IncrementalHoareTripleChecker+Valid, 12258 IncrementalHoareTripleChecker+Invalid, 44 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 70.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:07:34,051 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4733 Valid, 5493 Invalid, 12938 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [636 Valid, 12258 Invalid, 44 Unknown, 0 Unchecked, 70.5s Time] [2022-11-26 00:07:34,052 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1685 states. [2022-11-26 00:07:34,070 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1685 to 926. [2022-11-26 00:07:34,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 926 states, 922 states have (on average 1.1637744034707158) internal successors, (1073), 925 states have internal predecessors, (1073), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:07:34,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 926 states to 926 states and 1073 transitions. [2022-11-26 00:07:34,073 INFO L78 Accepts]: Start accepts. Automaton has 926 states and 1073 transitions. Word has length 42 [2022-11-26 00:07:34,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:07:34,074 INFO L495 AbstractCegarLoop]: Abstraction has 926 states and 1073 transitions. [2022-11-26 00:07:34,074 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 75 states, 75 states have (on average 1.64) internal successors, (123), 75 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:07:34,074 INFO L276 IsEmpty]: Start isEmpty. Operand 926 states and 1073 transitions. [2022-11-26 00:07:34,076 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-26 00:07:34,076 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:07:34,076 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:07:34,086 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-26 00:07:34,282 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-26 00:07:34,282 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-26 00:07:34,283 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:07:34,283 INFO L85 PathProgramCache]: Analyzing trace with hash -522356581, now seen corresponding path program 4 times [2022-11-26 00:07:34,283 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:07:34,283 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1620676821] [2022-11-26 00:07:34,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:07:34,283 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:07:34,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:07:35,373 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 25 proven. 66 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-26 00:07:35,373 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:07:35,373 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1620676821] [2022-11-26 00:07:35,373 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1620676821] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:07:35,373 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [546372290] [2022-11-26 00:07:35,373 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:07:35,373 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:07:35,373 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:07:35,374 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:07:35,377 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-26 00:07:35,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:07:35,549 INFO L263 TraceCheckSpWp]: Trace formula consists of 316 conjuncts, 63 conjunts are in the unsatisfiable core [2022-11-26 00:07:35,551 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:07:35,598 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:07:35,598 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 00:07:35,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:07:36,705 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 36 proven. 55 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-26 00:07:36,705 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:07:37,945 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:07:38,015 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 49 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-26 00:07:38,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [546372290] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:07:38,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [726697400] [2022-11-26 00:07:38,016 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-26 00:07:38,016 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:07:38,017 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:07:38,017 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:07:38,017 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:07:38,060 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:07:38,064 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:07:38,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:07:38,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:07:38,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:07:38,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:07:38,213 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-26 00:07:38,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:07:38,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:07:38,424 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-26 00:07:38,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-26 00:07:38,643 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-26 00:07:38,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-26 00:07:39,530 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-26 00:07:39,538 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-26 00:07:39,626 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:07:39,626 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:07:39,727 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-26 00:07:39,760 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:07:46,234 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24560#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:07:46,234 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:07:46,234 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:07:46,234 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 19, 19] total 58 [2022-11-26 00:07:46,235 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1099771187] [2022-11-26 00:07:46,235 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:07:46,235 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2022-11-26 00:07:46,235 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:07:46,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2022-11-26 00:07:46,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=414, Invalid=4988, Unknown=0, NotChecked=0, Total=5402 [2022-11-26 00:07:46,236 INFO L87 Difference]: Start difference. First operand 926 states and 1073 transitions. Second operand has 59 states, 58 states have (on average 2.2241379310344827) internal successors, (129), 59 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:07:49,512 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:07:49,513 INFO L93 Difference]: Finished difference Result 1172 states and 1358 transitions. [2022-11-26 00:07:49,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-26 00:07:49,513 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 58 states have (on average 2.2241379310344827) internal successors, (129), 59 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-26 00:07:49,513 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:07:49,518 INFO L225 Difference]: With dead ends: 1172 [2022-11-26 00:07:49,519 INFO L226 Difference]: Without dead ends: 1158 [2022-11-26 00:07:49,519 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 75 SyntacticMatches, 1 SemanticMatches, 95 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2196 ImplicationChecksByTransitivity, 11.0s TimeCoverageRelationStatistics Valid=1237, Invalid=8075, Unknown=0, NotChecked=0, Total=9312 [2022-11-26 00:07:49,519 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 891 mSDsluCounter, 561 mSDsCounter, 0 mSdLazyCounter, 1527 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 891 SdHoareTripleChecker+Valid, 599 SdHoareTripleChecker+Invalid, 1547 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 1527 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:07:49,520 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [891 Valid, 599 Invalid, 1547 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 1527 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-26 00:07:49,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1158 states. [2022-11-26 00:07:49,534 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1158 to 999. [2022-11-26 00:07:49,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 999 states, 995 states have (on average 1.1447236180904523) internal successors, (1139), 998 states have internal predecessors, (1139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:07:49,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 999 states to 999 states and 1139 transitions. [2022-11-26 00:07:49,538 INFO L78 Accepts]: Start accepts. Automaton has 999 states and 1139 transitions. Word has length 43 [2022-11-26 00:07:49,538 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:07:49,538 INFO L495 AbstractCegarLoop]: Abstraction has 999 states and 1139 transitions. [2022-11-26 00:07:49,538 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 58 states have (on average 2.2241379310344827) internal successors, (129), 59 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:07:49,539 INFO L276 IsEmpty]: Start isEmpty. Operand 999 states and 1139 transitions. [2022-11-26 00:07:49,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-26 00:07:49,540 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:07:49,540 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:07:49,556 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-26 00:07:49,747 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-26 00:07:49,747 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-26 00:07:49,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:07:49,747 INFO L85 PathProgramCache]: Analyzing trace with hash 1895680248, now seen corresponding path program 1 times [2022-11-26 00:07:49,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:07:49,747 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1908612988] [2022-11-26 00:07:49,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:07:49,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:07:49,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:07:51,332 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 17 proven. 41 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-26 00:07:51,332 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:07:51,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1908612988] [2022-11-26 00:07:51,332 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1908612988] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:07:51,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [18879200] [2022-11-26 00:07:51,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:07:51,333 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:07:51,333 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:07:51,334 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:07:51,336 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed988f2a-62f6-422d-8ec7-7bb0a31c6e66/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-26 00:07:51,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:07:51,513 INFO L263 TraceCheckSpWp]: Trace formula consists of 326 conjuncts, 78 conjunts are in the unsatisfiable core [2022-11-26 00:07:51,517 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:07:51,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:07:52,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-26 00:07:52,232 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-26 00:07:54,568 INFO L321 Elim1Store]: treesize reduction 4, result has 81.0 percent of original size [2022-11-26 00:07:54,569 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 27 [2022-11-26 00:07:54,761 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 10 proven. 46 refuted. 1 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-26 00:07:54,761 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:07:55,454 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:07:55,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 53 treesize of output 39 [2022-11-26 00:07:55,471 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:07:55,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 63 [2022-11-26 00:07:55,477 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:07:55,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 15 [2022-11-26 00:07:56,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:07:56,929 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 22 proven. 35 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-26 00:07:56,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [18879200] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:07:56,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [968027355] [2022-11-26 00:07:56,931 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-26 00:07:56,931 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:07:56,931 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:07:56,932 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:07:56,932 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:07:56,962 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:07:56,966 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:07:56,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:07:57,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:07:57,043 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:07:57,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:07:57,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-26 00:07:57,177 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:07:57,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:07:57,344 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-26 00:07:57,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-26 00:07:57,592 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-26 00:07:57,593 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-26 00:07:58,351 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-26 00:07:58,360 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-26 00:07:58,442 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:07:58,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:07:58,571 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-26 00:07:58,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-26 00:07:58,736 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:07:58,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:07:58,879 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:07:58,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:07:59,000 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-26 00:07:59,036 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:08:06,198 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27109#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrncat_#t~mem6#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post5#1.base|) |ULTIMATE.start_cstrncat_#t~post5#1.offset|)) (<= (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:08:06,199 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:08:06,199 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:08:06,199 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 21, 21] total 58 [2022-11-26 00:08:06,199 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1024029107] [2022-11-26 00:08:06,200 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:08:06,200 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2022-11-26 00:08:06,200 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:08:06,200 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2022-11-26 00:08:06,200 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=415, Invalid=4982, Unknown=5, NotChecked=0, Total=5402 [2022-11-26 00:08:06,201 INFO L87 Difference]: Start difference. First operand 999 states and 1139 transitions. Second operand has 59 states, 59 states have (on average 1.8983050847457628) internal successors, (112), 58 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:08:11,175 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.10s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:08:17,091 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.14s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-11-26 00:08:21,474 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.06s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0]