./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/termination-memory-alloca/openbsd_cstrspn-alloca-1.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/termination-memory-alloca/openbsd_cstrspn-alloca-1.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash e3b4fa4839d843c17aca38b087d008ecb7fb2a74ec53840f4a61df0dde2a3794 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 22:36:31,719 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 22:36:31,722 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 22:36:31,769 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 22:36:31,769 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 22:36:31,773 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 22:36:31,775 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 22:36:31,779 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 22:36:31,781 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 22:36:31,787 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 22:36:31,788 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 22:36:31,789 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 22:36:31,789 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 22:36:31,790 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 22:36:31,791 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 22:36:31,792 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 22:36:31,792 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 22:36:31,793 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 22:36:31,795 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 22:36:31,796 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 22:36:31,812 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 22:36:31,815 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 22:36:31,816 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 22:36:31,817 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 22:36:31,832 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 22:36:31,832 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 22:36:31,832 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 22:36:31,833 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 22:36:31,833 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 22:36:31,834 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 22:36:31,834 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 22:36:31,835 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 22:36:31,836 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 22:36:31,836 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 22:36:31,837 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 22:36:31,838 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 22:36:31,838 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 22:36:31,838 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 22:36:31,839 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 22:36:31,839 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 22:36:31,840 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 22:36:31,844 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-64bit-Taipan_Default.epf [2022-11-25 22:36:31,885 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 22:36:31,886 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 22:36:31,886 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 22:36:31,887 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 22:36:31,888 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 22:36:31,888 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 22:36:31,888 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-25 22:36:31,888 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-25 22:36:31,889 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-25 22:36:31,889 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-25 22:36:31,890 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-25 22:36:31,890 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-25 22:36:31,890 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-25 22:36:31,891 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-25 22:36:31,891 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-25 22:36:31,891 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-25 22:36:31,891 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-25 22:36:31,891 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-25 22:36:31,892 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 22:36:31,892 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 22:36:31,893 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 22:36:31,893 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-25 22:36:31,893 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 22:36:31,893 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 22:36:31,894 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-25 22:36:31,894 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-25 22:36:31,894 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-25 22:36:31,894 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 22:36:31,895 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-25 22:36:31,895 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 22:36:31,895 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 22:36:31,895 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 22:36:31,896 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 22:36:31,896 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 22:36:31,896 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-25 22:36:31,896 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 22:36:31,897 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-25 22:36:31,897 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 22:36:31,897 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-25 22:36:31,897 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e3b4fa4839d843c17aca38b087d008ecb7fb2a74ec53840f4a61df0dde2a3794 [2022-11-25 22:36:32,248 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 22:36:32,282 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 22:36:32,284 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 22:36:32,285 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 22:36:32,286 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 22:36:32,288 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/../../sv-benchmarks/c/termination-memory-alloca/openbsd_cstrspn-alloca-1.i [2022-11-25 22:36:35,246 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 22:36:35,501 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 22:36:35,502 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/sv-benchmarks/c/termination-memory-alloca/openbsd_cstrspn-alloca-1.i [2022-11-25 22:36:35,529 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/data/db0e021fa/3e6baf074aa640eeb1694cfc3cab2886/FLAG7a8bc2e93 [2022-11-25 22:36:35,555 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/data/db0e021fa/3e6baf074aa640eeb1694cfc3cab2886 [2022-11-25 22:36:35,557 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 22:36:35,563 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 22:36:35,564 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 22:36:35,564 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 22:36:35,570 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 22:36:35,570 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 10:36:35" (1/1) ... [2022-11-25 22:36:35,571 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1149a1c0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:35, skipping insertion in model container [2022-11-25 22:36:35,572 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 10:36:35" (1/1) ... [2022-11-25 22:36:35,579 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 22:36:35,617 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 22:36:36,005 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 22:36:36,018 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 22:36:36,082 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 22:36:36,114 INFO L208 MainTranslator]: Completed translation [2022-11-25 22:36:36,115 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36 WrapperNode [2022-11-25 22:36:36,115 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 22:36:36,117 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 22:36:36,117 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 22:36:36,117 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 22:36:36,124 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (1/1) ... [2022-11-25 22:36:36,145 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (1/1) ... [2022-11-25 22:36:36,173 INFO L138 Inliner]: procedures = 111, calls = 13, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 63 [2022-11-25 22:36:36,173 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 22:36:36,174 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 22:36:36,174 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 22:36:36,175 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 22:36:36,184 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (1/1) ... [2022-11-25 22:36:36,184 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (1/1) ... [2022-11-25 22:36:36,201 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (1/1) ... [2022-11-25 22:36:36,202 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (1/1) ... [2022-11-25 22:36:36,206 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (1/1) ... [2022-11-25 22:36:36,220 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (1/1) ... [2022-11-25 22:36:36,221 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (1/1) ... [2022-11-25 22:36:36,222 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (1/1) ... [2022-11-25 22:36:36,224 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 22:36:36,227 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 22:36:36,227 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 22:36:36,228 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 22:36:36,229 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (1/1) ... [2022-11-25 22:36:36,235 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 22:36:36,247 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:36:36,262 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 22:36:36,290 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 22:36:36,308 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-25 22:36:36,308 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-25 22:36:36,308 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-25 22:36:36,310 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-25 22:36:36,310 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 22:36:36,310 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 22:36:36,446 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 22:36:36,448 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 22:36:36,603 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 22:36:36,722 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 22:36:36,722 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-25 22:36:36,725 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 10:36:36 BoogieIcfgContainer [2022-11-25 22:36:36,725 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 22:36:36,727 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 22:36:36,727 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 22:36:36,735 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 22:36:36,735 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 10:36:35" (1/3) ... [2022-11-25 22:36:36,736 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c243375 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 10:36:36, skipping insertion in model container [2022-11-25 22:36:36,736 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 10:36:36" (2/3) ... [2022-11-25 22:36:36,737 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c243375 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 10:36:36, skipping insertion in model container [2022-11-25 22:36:36,737 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 10:36:36" (3/3) ... [2022-11-25 22:36:36,738 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrspn-alloca-1.i [2022-11-25 22:36:36,778 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 22:36:36,780 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 9 error locations. [2022-11-25 22:36:36,840 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 22:36:36,847 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2f5d8c2a, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 22:36:36,848 INFO L358 AbstractCegarLoop]: Starting to check reachability of 9 error locations. [2022-11-25 22:36:36,853 INFO L276 IsEmpty]: Start isEmpty. Operand has 21 states, 11 states have (on average 2.090909090909091) internal successors, (23), 20 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:36,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3 [2022-11-25 22:36:36,859 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:36,860 INFO L195 NwaCegarLoop]: trace histogram [1, 1] [2022-11-25 22:36:36,861 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:36,867 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:36,867 INFO L85 PathProgramCache]: Analyzing trace with hash 3086, now seen corresponding path program 1 times [2022-11-25 22:36:36,879 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:36,879 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [849799312] [2022-11-25 22:36:36,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:36,880 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:37,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:37,365 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:37,365 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:37,366 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [849799312] [2022-11-25 22:36:37,366 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [849799312] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:36:37,366 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:36:37,367 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-25 22:36:37,369 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [501390405] [2022-11-25 22:36:37,370 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:36:37,374 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 22:36:37,374 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:37,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 22:36:37,414 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:36:37,416 INFO L87 Difference]: Start difference. First operand has 21 states, 11 states have (on average 2.090909090909091) internal successors, (23), 20 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.0) internal successors, (2), 2 states have internal predecessors, (2), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:37,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:37,485 INFO L93 Difference]: Finished difference Result 20 states and 21 transitions. [2022-11-25 22:36:37,487 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 22:36:37,489 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.0) internal successors, (2), 2 states have internal predecessors, (2), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 2 [2022-11-25 22:36:37,489 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:37,498 INFO L225 Difference]: With dead ends: 20 [2022-11-25 22:36:37,498 INFO L226 Difference]: Without dead ends: 19 [2022-11-25 22:36:37,500 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:36:37,505 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 17 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:37,507 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 10 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:36:37,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-25 22:36:37,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2022-11-25 22:36:37,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 11 states have (on average 1.8181818181818181) internal successors, (20), 18 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:37,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 20 transitions. [2022-11-25 22:36:37,541 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 20 transitions. Word has length 2 [2022-11-25 22:36:37,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:37,541 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 20 transitions. [2022-11-25 22:36:37,542 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.0) internal successors, (2), 2 states have internal predecessors, (2), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:37,543 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 20 transitions. [2022-11-25 22:36:37,543 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3 [2022-11-25 22:36:37,544 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:37,544 INFO L195 NwaCegarLoop]: trace histogram [1, 1] [2022-11-25 22:36:37,544 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 22:36:37,545 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:37,546 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:37,546 INFO L85 PathProgramCache]: Analyzing trace with hash 3087, now seen corresponding path program 1 times [2022-11-25 22:36:37,546 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:37,547 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1967691646] [2022-11-25 22:36:37,547 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:37,548 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:37,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:37,761 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:37,762 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:37,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1967691646] [2022-11-25 22:36:37,762 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1967691646] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:36:37,763 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:36:37,763 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-25 22:36:37,763 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1088023383] [2022-11-25 22:36:37,763 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:36:37,764 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 22:36:37,764 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:37,765 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 22:36:37,765 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:36:37,766 INFO L87 Difference]: Start difference. First operand 19 states and 20 transitions. Second operand has 3 states, 2 states have (on average 1.0) internal successors, (2), 2 states have internal predecessors, (2), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:37,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:37,836 INFO L93 Difference]: Finished difference Result 18 states and 19 transitions. [2022-11-25 22:36:37,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 22:36:37,837 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.0) internal successors, (2), 2 states have internal predecessors, (2), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 2 [2022-11-25 22:36:37,837 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:37,837 INFO L225 Difference]: With dead ends: 18 [2022-11-25 22:36:37,837 INFO L226 Difference]: Without dead ends: 18 [2022-11-25 22:36:37,838 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:36:37,839 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 18 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:37,840 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 10 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:36:37,841 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18 states. [2022-11-25 22:36:37,842 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18 to 18. [2022-11-25 22:36:37,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 11 states have (on average 1.7272727272727273) internal successors, (19), 17 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:37,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 19 transitions. [2022-11-25 22:36:37,858 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 19 transitions. Word has length 2 [2022-11-25 22:36:37,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:37,859 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 19 transitions. [2022-11-25 22:36:37,859 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.0) internal successors, (2), 2 states have internal predecessors, (2), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:37,859 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 19 transitions. [2022-11-25 22:36:37,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-25 22:36:37,860 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:37,860 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-25 22:36:37,860 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 22:36:37,860 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:37,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:37,879 INFO L85 PathProgramCache]: Analyzing trace with hash 95655, now seen corresponding path program 1 times [2022-11-25 22:36:37,879 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:37,879 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [228922084] [2022-11-25 22:36:37,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:37,880 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:37,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:37,984 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:37,985 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:37,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [228922084] [2022-11-25 22:36:37,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [228922084] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:36:37,986 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:36:37,986 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-25 22:36:37,988 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1465318445] [2022-11-25 22:36:37,988 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:36:37,988 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 22:36:37,989 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:37,989 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 22:36:37,990 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:36:37,990 INFO L87 Difference]: Start difference. First operand 18 states and 19 transitions. Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:38,020 INFO L93 Difference]: Finished difference Result 17 states and 18 transitions. [2022-11-25 22:36:38,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 22:36:38,020 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-25 22:36:38,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:38,023 INFO L225 Difference]: With dead ends: 17 [2022-11-25 22:36:38,023 INFO L226 Difference]: Without dead ends: 17 [2022-11-25 22:36:38,024 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:36:38,032 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 14 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 9 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:38,033 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 9 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:36:38,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17 states. [2022-11-25 22:36:38,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17 to 17. [2022-11-25 22:36:38,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 11 states have (on average 1.6363636363636365) internal successors, (18), 16 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 18 transitions. [2022-11-25 22:36:38,040 INFO L78 Accepts]: Start accepts. Automaton has 17 states and 18 transitions. Word has length 3 [2022-11-25 22:36:38,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:38,041 INFO L495 AbstractCegarLoop]: Abstraction has 17 states and 18 transitions. [2022-11-25 22:36:38,041 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,041 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 18 transitions. [2022-11-25 22:36:38,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-25 22:36:38,042 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:38,042 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-25 22:36:38,042 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 22:36:38,042 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:38,045 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:38,046 INFO L85 PathProgramCache]: Analyzing trace with hash 95656, now seen corresponding path program 1 times [2022-11-25 22:36:38,046 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:38,047 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1189348338] [2022-11-25 22:36:38,047 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:38,047 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:38,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:38,197 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:38,197 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:38,197 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1189348338] [2022-11-25 22:36:38,198 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1189348338] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:36:38,198 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:36:38,198 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-25 22:36:38,198 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1616924482] [2022-11-25 22:36:38,199 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:36:38,199 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 22:36:38,199 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:38,200 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 22:36:38,200 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:36:38,201 INFO L87 Difference]: Start difference. First operand 17 states and 18 transitions. Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:38,220 INFO L93 Difference]: Finished difference Result 16 states and 17 transitions. [2022-11-25 22:36:38,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 22:36:38,221 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-25 22:36:38,221 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:38,221 INFO L225 Difference]: With dead ends: 16 [2022-11-25 22:36:38,222 INFO L226 Difference]: Without dead ends: 16 [2022-11-25 22:36:38,222 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 22:36:38,223 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 15 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 9 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:38,224 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 9 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:36:38,224 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16 states. [2022-11-25 22:36:38,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16 to 16. [2022-11-25 22:36:38,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 11 states have (on average 1.5454545454545454) internal successors, (17), 15 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 17 transitions. [2022-11-25 22:36:38,227 INFO L78 Accepts]: Start accepts. Automaton has 16 states and 17 transitions. Word has length 3 [2022-11-25 22:36:38,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:38,227 INFO L495 AbstractCegarLoop]: Abstraction has 16 states and 17 transitions. [2022-11-25 22:36:38,227 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,228 INFO L276 IsEmpty]: Start isEmpty. Operand 16 states and 17 transitions. [2022-11-25 22:36:38,228 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 22:36:38,228 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:38,228 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-25 22:36:38,228 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 22:36:38,229 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:38,229 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:38,229 INFO L85 PathProgramCache]: Analyzing trace with hash 91961743, now seen corresponding path program 1 times [2022-11-25 22:36:38,230 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:38,230 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2117839650] [2022-11-25 22:36:38,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:38,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:38,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:38,299 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:38,299 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:38,300 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2117839650] [2022-11-25 22:36:38,300 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2117839650] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:36:38,300 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:36:38,300 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 22:36:38,300 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [106563445] [2022-11-25 22:36:38,301 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:36:38,301 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 22:36:38,301 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:38,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 22:36:38,302 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:36:38,302 INFO L87 Difference]: Start difference. First operand 16 states and 17 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:38,350 INFO L93 Difference]: Finished difference Result 15 states and 16 transitions. [2022-11-25 22:36:38,350 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 22:36:38,350 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 22:36:38,351 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:38,351 INFO L225 Difference]: With dead ends: 15 [2022-11-25 22:36:38,351 INFO L226 Difference]: Without dead ends: 15 [2022-11-25 22:36:38,351 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 22:36:38,352 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 23 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:38,353 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [23 Valid, 13 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:36:38,354 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15 states. [2022-11-25 22:36:38,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15 to 15. [2022-11-25 22:36:38,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 11 states have (on average 1.4545454545454546) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2022-11-25 22:36:38,356 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 5 [2022-11-25 22:36:38,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:38,356 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2022-11-25 22:36:38,357 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,357 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2022-11-25 22:36:38,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 22:36:38,357 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:38,357 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-25 22:36:38,358 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 22:36:38,358 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:38,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:38,359 INFO L85 PathProgramCache]: Analyzing trace with hash 91961744, now seen corresponding path program 1 times [2022-11-25 22:36:38,359 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:38,359 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [353074208] [2022-11-25 22:36:38,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:38,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:38,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:38,535 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:38,536 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:38,536 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [353074208] [2022-11-25 22:36:38,536 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [353074208] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:36:38,536 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:36:38,537 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 22:36:38,537 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2015892332] [2022-11-25 22:36:38,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:36:38,537 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 22:36:38,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:38,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 22:36:38,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-25 22:36:38,539 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:38,607 INFO L93 Difference]: Finished difference Result 17 states and 18 transitions. [2022-11-25 22:36:38,608 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 22:36:38,608 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 22:36:38,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:38,610 INFO L225 Difference]: With dead ends: 17 [2022-11-25 22:36:38,610 INFO L226 Difference]: Without dead ends: 17 [2022-11-25 22:36:38,611 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2022-11-25 22:36:38,613 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 32 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 21 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:38,618 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 21 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:36:38,620 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17 states. [2022-11-25 22:36:38,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17 to 17. [2022-11-25 22:36:38,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 16 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 18 transitions. [2022-11-25 22:36:38,625 INFO L78 Accepts]: Start accepts. Automaton has 17 states and 18 transitions. Word has length 5 [2022-11-25 22:36:38,625 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:38,625 INFO L495 AbstractCegarLoop]: Abstraction has 17 states and 18 transitions. [2022-11-25 22:36:38,625 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,626 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 18 transitions. [2022-11-25 22:36:38,626 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-25 22:36:38,626 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:38,626 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:36:38,626 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-25 22:36:38,626 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:38,627 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:38,627 INFO L85 PathProgramCache]: Analyzing trace with hash -1819042571, now seen corresponding path program 1 times [2022-11-25 22:36:38,627 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:38,627 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1536043754] [2022-11-25 22:36:38,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:38,628 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:38,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:38,747 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:38,748 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:38,748 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1536043754] [2022-11-25 22:36:38,748 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1536043754] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:36:38,748 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:36:38,748 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 22:36:38,749 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [570767947] [2022-11-25 22:36:38,749 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:36:38,749 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 22:36:38,750 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:38,751 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 22:36:38,751 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 22:36:38,751 INFO L87 Difference]: Start difference. First operand 17 states and 18 transitions. Second operand has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:38,801 INFO L93 Difference]: Finished difference Result 16 states and 17 transitions. [2022-11-25 22:36:38,802 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 22:36:38,802 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-25 22:36:38,802 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:38,803 INFO L225 Difference]: With dead ends: 16 [2022-11-25 22:36:38,804 INFO L226 Difference]: Without dead ends: 16 [2022-11-25 22:36:38,805 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 22:36:38,806 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 19 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 15 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:38,806 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 15 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:36:38,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16 states. [2022-11-25 22:36:38,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16 to 16. [2022-11-25 22:36:38,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 13 states have (on average 1.3076923076923077) internal successors, (17), 15 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 17 transitions. [2022-11-25 22:36:38,810 INFO L78 Accepts]: Start accepts. Automaton has 16 states and 17 transitions. Word has length 7 [2022-11-25 22:36:38,810 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:38,810 INFO L495 AbstractCegarLoop]: Abstraction has 16 states and 17 transitions. [2022-11-25 22:36:38,811 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:38,811 INFO L276 IsEmpty]: Start isEmpty. Operand 16 states and 17 transitions. [2022-11-25 22:36:38,811 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-25 22:36:38,812 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:38,812 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:36:38,812 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-25 22:36:38,812 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:38,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:38,813 INFO L85 PathProgramCache]: Analyzing trace with hash -1819042570, now seen corresponding path program 1 times [2022-11-25 22:36:38,813 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:38,814 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [446946802] [2022-11-25 22:36:38,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:38,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:38,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:39,057 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:39,057 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:39,058 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [446946802] [2022-11-25 22:36:39,058 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [446946802] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:36:39,058 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:36:39,058 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 22:36:39,059 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [20885172] [2022-11-25 22:36:39,059 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:36:39,060 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 22:36:39,060 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:39,060 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 22:36:39,061 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 22:36:39,061 INFO L87 Difference]: Start difference. First operand 16 states and 17 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:39,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:39,177 INFO L93 Difference]: Finished difference Result 19 states and 21 transitions. [2022-11-25 22:36:39,178 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 22:36:39,178 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-25 22:36:39,178 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:39,179 INFO L225 Difference]: With dead ends: 19 [2022-11-25 22:36:39,179 INFO L226 Difference]: Without dead ends: 19 [2022-11-25 22:36:39,179 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=47, Unknown=0, NotChecked=0, Total=72 [2022-11-25 22:36:39,180 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 33 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 16 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:39,180 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 16 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:36:39,181 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-25 22:36:39,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 18. [2022-11-25 22:36:39,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 17 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:39,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 19 transitions. [2022-11-25 22:36:39,183 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 19 transitions. Word has length 7 [2022-11-25 22:36:39,183 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:39,183 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 19 transitions. [2022-11-25 22:36:39,183 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:39,183 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 19 transitions. [2022-11-25 22:36:39,184 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-25 22:36:39,184 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:39,184 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:36:39,184 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-25 22:36:39,184 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:39,185 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:39,185 INFO L85 PathProgramCache]: Analyzing trace with hash -1494074860, now seen corresponding path program 1 times [2022-11-25 22:36:39,185 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:39,185 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [577966760] [2022-11-25 22:36:39,185 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:39,185 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:39,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:39,415 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:39,415 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:39,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [577966760] [2022-11-25 22:36:39,416 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [577966760] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 22:36:39,416 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 22:36:39,416 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 22:36:39,416 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [728921469] [2022-11-25 22:36:39,417 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 22:36:39,417 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 22:36:39,417 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:39,418 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 22:36:39,418 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 22:36:39,418 INFO L87 Difference]: Start difference. First operand 18 states and 19 transitions. Second operand has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:39,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:39,437 INFO L93 Difference]: Finished difference Result 17 states and 18 transitions. [2022-11-25 22:36:39,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 22:36:39,437 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-25 22:36:39,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:39,438 INFO L225 Difference]: With dead ends: 17 [2022-11-25 22:36:39,438 INFO L226 Difference]: Without dead ends: 15 [2022-11-25 22:36:39,438 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 22:36:39,439 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 5 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 16 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:39,440 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 16 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 22:36:39,440 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15 states. [2022-11-25 22:36:39,441 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15 to 15. [2022-11-25 22:36:39,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:39,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2022-11-25 22:36:39,442 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 10 [2022-11-25 22:36:39,442 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:39,443 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2022-11-25 22:36:39,443 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:39,443 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2022-11-25 22:36:39,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-25 22:36:39,443 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:39,444 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:36:39,444 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-25 22:36:39,444 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:39,445 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:39,445 INFO L85 PathProgramCache]: Analyzing trace with hash 928362868, now seen corresponding path program 1 times [2022-11-25 22:36:39,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:39,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [980197179] [2022-11-25 22:36:39,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:39,446 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:39,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:39,935 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:39,936 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:39,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [980197179] [2022-11-25 22:36:39,936 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [980197179] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:36:39,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2102721395] [2022-11-25 22:36:39,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:39,940 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:36:39,941 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:36:39,944 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:36:39,952 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 22:36:40,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:40,038 WARN L261 TraceCheckSpWp]: Trace formula consists of 130 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-25 22:36:40,055 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:36:40,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:36:40,286 INFO L321 Elim1Store]: treesize reduction 27, result has 25.0 percent of original size [2022-11-25 22:36:40,286 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 22 [2022-11-25 22:36:40,704 INFO L321 Elim1Store]: treesize reduction 36, result has 41.0 percent of original size [2022-11-25 22:36:40,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 33 treesize of output 37 [2022-11-25 22:36:40,881 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:40,881 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:36:41,357 INFO L321 Elim1Store]: treesize reduction 17, result has 54.1 percent of original size [2022-11-25 22:36:41,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 191 treesize of output 151 [2022-11-25 22:36:41,378 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:36:41,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 147 treesize of output 141 [2022-11-25 22:36:41,402 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 22:36:41,457 INFO L321 Elim1Store]: treesize reduction 7, result has 12.5 percent of original size [2022-11-25 22:36:41,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 122 treesize of output 115 [2022-11-25 22:36:41,501 INFO L321 Elim1Store]: treesize reduction 5, result has 82.8 percent of original size [2022-11-25 22:36:41,501 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 67 treesize of output 77 [2022-11-25 22:36:41,632 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:41,632 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2102721395] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:36:41,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1515102371] [2022-11-25 22:36:41,650 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:36:41,650 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:36:41,654 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:36:41,659 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:36:41,660 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:36:41,712 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:36:41,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:36:41,763 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:36:41,816 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:36:41,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:36:42,347 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:36:44,041 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '476#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post2#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_cstrspn_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:36:44,041 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:36:44,041 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:36:44,041 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 10, 10] total 28 [2022-11-25 22:36:44,042 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1536762451] [2022-11-25 22:36:44,042 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:36:44,042 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-25 22:36:44,042 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:44,043 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-25 22:36:44,044 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=180, Invalid=1302, Unknown=0, NotChecked=0, Total=1482 [2022-11-25 22:36:44,044 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 30 states, 29 states have (on average 1.1379310344827587) internal successors, (33), 29 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:44,972 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:44,972 INFO L93 Difference]: Finished difference Result 25 states and 27 transitions. [2022-11-25 22:36:44,972 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-25 22:36:44,973 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 1.1379310344827587) internal successors, (33), 29 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-25 22:36:44,973 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:44,973 INFO L225 Difference]: With dead ends: 25 [2022-11-25 22:36:44,974 INFO L226 Difference]: Without dead ends: 25 [2022-11-25 22:36:44,975 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 631 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=350, Invalid=2100, Unknown=0, NotChecked=0, Total=2450 [2022-11-25 22:36:44,975 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 89 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 16 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:44,976 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [89 Valid, 16 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 22:36:44,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25 states. [2022-11-25 22:36:44,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25 to 23. [2022-11-25 22:36:44,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 21 states have (on average 1.2380952380952381) internal successors, (26), 22 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:44,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 26 transitions. [2022-11-25 22:36:44,979 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 26 transitions. Word has length 11 [2022-11-25 22:36:44,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:44,980 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 26 transitions. [2022-11-25 22:36:44,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 1.1379310344827587) internal successors, (33), 29 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:44,980 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions. [2022-11-25 22:36:44,980 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-25 22:36:44,981 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:44,981 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 22:36:44,987 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-25 22:36:45,187 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:36:45,187 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:45,188 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:45,188 INFO L85 PathProgramCache]: Analyzing trace with hash 928365046, now seen corresponding path program 1 times [2022-11-25 22:36:45,188 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:45,188 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2125569257] [2022-11-25 22:36:45,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:45,189 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:45,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:45,494 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:45,494 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:45,495 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2125569257] [2022-11-25 22:36:45,495 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2125569257] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:36:45,495 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [216290813] [2022-11-25 22:36:45,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:45,495 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:36:45,495 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:36:45,497 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:36:45,526 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-25 22:36:45,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:45,585 INFO L263 TraceCheckSpWp]: Trace formula consists of 129 conjuncts, 41 conjunts are in the unsatisfiable core [2022-11-25 22:36:45,587 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:36:45,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:36:45,766 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:36:45,766 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 15 [2022-11-25 22:36:45,877 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:45,877 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:36:46,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-25 22:36:46,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 22:36:46,134 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-25 22:36:46,157 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:46,157 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [216290813] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:36:46,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1545792995] [2022-11-25 22:36:46,159 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:36:46,159 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:36:46,160 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:36:46,160 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:36:46,160 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:36:46,188 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:36:46,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:36:46,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:36:46,291 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:36:46,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:36:46,552 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:36:48,548 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '637#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (= |ULTIMATE.start_cstrspn_~spanp~0#1.base| |ULTIMATE.start_cstrspn_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstrspn_~p~0#1.offset| 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_cstrspn_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (= (+ |ULTIMATE.start_cstrspn_#t~post4#1.offset| 1) |ULTIMATE.start_cstrspn_~spanp~0#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post4#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:36:48,549 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:36:48,549 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:36:48,549 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 20 [2022-11-25 22:36:48,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [600731437] [2022-11-25 22:36:48,549 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:36:48,550 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-25 22:36:48,550 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:48,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-25 22:36:48,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=120, Invalid=810, Unknown=0, NotChecked=0, Total=930 [2022-11-25 22:36:48,552 INFO L87 Difference]: Start difference. First operand 23 states and 26 transitions. Second operand has 22 states, 21 states have (on average 1.4761904761904763) internal successors, (31), 21 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:49,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:49,108 INFO L93 Difference]: Finished difference Result 38 states and 43 transitions. [2022-11-25 22:36:49,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-25 22:36:49,110 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 21 states have (on average 1.4761904761904763) internal successors, (31), 21 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-25 22:36:49,110 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:49,112 INFO L225 Difference]: With dead ends: 38 [2022-11-25 22:36:49,112 INFO L226 Difference]: Without dead ends: 38 [2022-11-25 22:36:49,113 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 8 SyntacticMatches, 1 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 279 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=209, Invalid=1197, Unknown=0, NotChecked=0, Total=1406 [2022-11-25 22:36:49,113 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 83 mSDsluCounter, 29 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 35 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:49,114 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 35 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 22:36:49,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-25 22:36:49,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 31. [2022-11-25 22:36:49,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 29 states have (on average 1.2413793103448276) internal successors, (36), 30 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:49,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 36 transitions. [2022-11-25 22:36:49,118 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 36 transitions. Word has length 11 [2022-11-25 22:36:49,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:49,118 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 36 transitions. [2022-11-25 22:36:49,118 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 21 states have (on average 1.4761904761904763) internal successors, (31), 21 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:49,118 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 36 transitions. [2022-11-25 22:36:49,119 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-25 22:36:49,119 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:49,119 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-25 22:36:49,129 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-25 22:36:49,324 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:36:49,325 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:49,325 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:49,326 INFO L85 PathProgramCache]: Analyzing trace with hash -1027516682, now seen corresponding path program 2 times [2022-11-25 22:36:49,326 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:49,326 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [321418179] [2022-11-25 22:36:49,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:49,327 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:49,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:50,012 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:50,012 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:50,012 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [321418179] [2022-11-25 22:36:50,012 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [321418179] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:36:50,013 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1388286876] [2022-11-25 22:36:50,013 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:36:50,013 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:36:50,013 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:36:50,014 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:36:50,023 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-25 22:36:50,109 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 22:36:50,110 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:36:50,111 INFO L263 TraceCheckSpWp]: Trace formula consists of 147 conjuncts, 55 conjunts are in the unsatisfiable core [2022-11-25 22:36:50,114 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:36:50,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 22:36:50,544 INFO L321 Elim1Store]: treesize reduction 4, result has 76.5 percent of original size [2022-11-25 22:36:50,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 23 [2022-11-25 22:36:50,662 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:50,662 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:36:51,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-11-25 22:36:51,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-25 22:36:51,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-11-25 22:36:51,207 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:51,207 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1388286876] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:36:51,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1311791570] [2022-11-25 22:36:51,210 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:36:51,210 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:36:51,210 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:36:51,210 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:36:51,211 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:36:51,250 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:36:51,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:36:51,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:36:51,334 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:36:51,336 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:36:51,576 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:36:53,713 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '844#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (= |ULTIMATE.start_cstrspn_~spanp~0#1.base| |ULTIMATE.start_cstrspn_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstrspn_~p~0#1.offset| 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_cstrspn_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (= (+ |ULTIMATE.start_cstrspn_#t~post4#1.offset| 1) |ULTIMATE.start_cstrspn_~spanp~0#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post4#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:36:53,713 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:36:53,713 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:36:53,713 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 10, 10] total 29 [2022-11-25 22:36:53,714 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2016551113] [2022-11-25 22:36:53,714 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:36:53,714 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-25 22:36:53,714 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:36:53,715 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-25 22:36:53,716 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=1391, Unknown=0, NotChecked=0, Total=1560 [2022-11-25 22:36:53,716 INFO L87 Difference]: Start difference. First operand 31 states and 36 transitions. Second operand has 31 states, 30 states have (on average 1.5) internal successors, (45), 30 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:55,871 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:36:55,872 INFO L93 Difference]: Finished difference Result 62 states and 71 transitions. [2022-11-25 22:36:55,872 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-25 22:36:55,872 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 1.5) internal successors, (45), 30 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-25 22:36:55,873 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:36:55,873 INFO L225 Difference]: With dead ends: 62 [2022-11-25 22:36:55,873 INFO L226 Difference]: Without dead ends: 62 [2022-11-25 22:36:55,874 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 566 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=362, Invalid=2290, Unknown=0, NotChecked=0, Total=2652 [2022-11-25 22:36:55,875 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 170 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 261 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 61 SdHoareTripleChecker+Invalid, 262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 261 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 22:36:55,875 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [170 Valid, 61 Invalid, 262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 261 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 22:36:55,876 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-25 22:36:55,879 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 47. [2022-11-25 22:36:55,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 45 states have (on average 1.2444444444444445) internal successors, (56), 46 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:55,881 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 56 transitions. [2022-11-25 22:36:55,881 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 56 transitions. Word has length 15 [2022-11-25 22:36:55,881 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:36:55,881 INFO L495 AbstractCegarLoop]: Abstraction has 47 states and 56 transitions. [2022-11-25 22:36:55,881 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 1.5) internal successors, (45), 30 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:36:55,882 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 56 transitions. [2022-11-25 22:36:55,882 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-25 22:36:55,882 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:36:55,882 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1] [2022-11-25 22:36:55,888 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-11-25 22:36:56,088 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-25 22:36:56,088 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:36:56,088 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:36:56,089 INFO L85 PathProgramCache]: Analyzing trace with hash 1078439512, now seen corresponding path program 2 times [2022-11-25 22:36:56,089 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:36:56,089 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [344415907] [2022-11-25 22:36:56,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:36:56,089 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:36:56,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:36:57,158 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:57,159 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:36:57,159 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [344415907] [2022-11-25 22:36:57,159 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [344415907] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:36:57,159 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [546416191] [2022-11-25 22:36:57,159 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:36:57,159 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:36:57,160 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:36:57,163 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:36:57,186 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-25 22:36:57,259 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 22:36:57,259 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:36:57,261 INFO L263 TraceCheckSpWp]: Trace formula consists of 167 conjuncts, 60 conjunts are in the unsatisfiable core [2022-11-25 22:36:57,264 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:36:57,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 16 [2022-11-25 22:36:57,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:36:57,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-25 22:36:57,808 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:36:57,824 INFO L321 Elim1Store]: treesize reduction 4, result has 76.5 percent of original size [2022-11-25 22:36:57,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 27 treesize of output 23 [2022-11-25 22:36:58,057 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:58,057 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:36:58,801 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:36:58,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 34 [2022-11-25 22:36:58,834 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:36:58,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 58 treesize of output 57 [2022-11-25 22:36:58,849 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-25 22:36:58,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 15 [2022-11-25 22:36:58,974 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:36:58,974 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [546416191] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:36:58,974 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2126309976] [2022-11-25 22:36:58,975 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:36:58,976 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:36:58,976 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:36:58,976 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:36:58,976 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:36:59,012 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:36:59,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:36:59,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:36:59,076 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:36:59,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:36:59,460 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:37:01,359 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1122#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post2#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_cstrspn_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:37:01,360 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:37:01,360 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:37:01,360 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 12, 12] total 38 [2022-11-25 22:37:01,360 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1849238640] [2022-11-25 22:37:01,360 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:37:01,361 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-11-25 22:37:01,361 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:37:01,362 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-11-25 22:37:01,363 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=180, Invalid=2172, Unknown=0, NotChecked=0, Total=2352 [2022-11-25 22:37:01,363 INFO L87 Difference]: Start difference. First operand 47 states and 56 transitions. Second operand has 40 states, 39 states have (on average 1.3076923076923077) internal successors, (51), 39 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:37:06,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:37:06,053 INFO L93 Difference]: Finished difference Result 91 states and 107 transitions. [2022-11-25 22:37:06,058 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-25 22:37:06,059 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 39 states have (on average 1.3076923076923077) internal successors, (51), 39 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-25 22:37:06,059 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:37:06,061 INFO L225 Difference]: With dead ends: 91 [2022-11-25 22:37:06,061 INFO L226 Difference]: Without dead ends: 91 [2022-11-25 22:37:06,063 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 89 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 73 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 903 ImplicationChecksByTransitivity, 7.5s TimeCoverageRelationStatistics Valid=644, Invalid=4906, Unknown=0, NotChecked=0, Total=5550 [2022-11-25 22:37:06,065 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 246 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 464 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 469 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 464 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 22:37:06,066 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [246 Valid, 46 Invalid, 469 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 464 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-25 22:37:06,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-25 22:37:06,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 87. [2022-11-25 22:37:06,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 85 states have (on average 1.2470588235294118) internal successors, (106), 86 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:37:06,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 106 transitions. [2022-11-25 22:37:06,085 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 106 transitions. Word has length 17 [2022-11-25 22:37:06,085 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:37:06,086 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 106 transitions. [2022-11-25 22:37:06,086 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 39 states have (on average 1.3076923076923077) internal successors, (51), 39 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:37:06,086 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 106 transitions. [2022-11-25 22:37:06,087 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-25 22:37:06,087 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:37:06,087 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 1, 1, 1, 1, 1, 1] [2022-11-25 22:37:06,098 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-25 22:37:06,293 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-25 22:37:06,293 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:37:06,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:37:06,294 INFO L85 PathProgramCache]: Analyzing trace with hash 764743926, now seen corresponding path program 3 times [2022-11-25 22:37:06,294 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:37:06,294 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2023683954] [2022-11-25 22:37:06,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:37:06,294 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:37:06,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:37:07,010 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 32 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:37:07,010 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:37:07,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2023683954] [2022-11-25 22:37:07,011 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2023683954] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:37:07,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [834041198] [2022-11-25 22:37:07,011 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:37:07,011 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:37:07,011 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:37:07,012 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:37:07,014 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-25 22:37:07,098 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:37:07,098 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:37:07,100 INFO L263 TraceCheckSpWp]: Trace formula consists of 183 conjuncts, 77 conjunts are in the unsatisfiable core [2022-11-25 22:37:07,103 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:37:07,119 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 22:37:07,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 22:37:07,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:37:08,330 INFO L321 Elim1Store]: treesize reduction 12, result has 72.7 percent of original size [2022-11-25 22:37:08,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 50 treesize of output 50 [2022-11-25 22:37:08,542 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 32 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:37:08,543 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:37:09,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 51 [2022-11-25 22:37:09,924 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 77 [2022-11-25 22:37:10,011 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 32 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:37:10,011 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [834041198] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:37:10,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1191156679] [2022-11-25 22:37:10,013 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:37:10,013 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:37:10,014 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:37:10,014 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:37:10,014 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:37:10,046 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:37:10,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:37:10,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:37:10,111 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:37:10,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:37:10,295 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:37:12,843 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1538#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (= |ULTIMATE.start_cstrspn_~spanp~0#1.base| |ULTIMATE.start_cstrspn_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstrspn_~p~0#1.offset| 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_cstrspn_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (= (+ |ULTIMATE.start_cstrspn_#t~post4#1.offset| 1) |ULTIMATE.start_cstrspn_~spanp~0#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post4#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:37:12,843 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:37:12,843 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:37:12,843 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 16, 16] total 43 [2022-11-25 22:37:12,843 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [375349620] [2022-11-25 22:37:12,844 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:37:12,844 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-11-25 22:37:12,844 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:37:12,845 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-11-25 22:37:12,846 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=245, Invalid=2617, Unknown=0, NotChecked=0, Total=2862 [2022-11-25 22:37:12,846 INFO L87 Difference]: Start difference. First operand 87 states and 106 transitions. Second operand has 45 states, 44 states have (on average 1.5681818181818181) internal successors, (69), 44 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:37:18,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:37:18,138 INFO L93 Difference]: Finished difference Result 218 states and 253 transitions. [2022-11-25 22:37:18,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-25 22:37:18,138 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 44 states have (on average 1.5681818181818181) internal successors, (69), 44 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-11-25 22:37:18,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:37:18,140 INFO L225 Difference]: With dead ends: 218 [2022-11-25 22:37:18,140 INFO L226 Difference]: Without dead ends: 218 [2022-11-25 22:37:18,142 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1038 ImplicationChecksByTransitivity, 9.1s TimeCoverageRelationStatistics Valid=744, Invalid=5418, Unknown=0, NotChecked=0, Total=6162 [2022-11-25 22:37:18,142 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 370 mSDsluCounter, 131 mSDsCounter, 0 mSdLazyCounter, 677 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 370 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 687 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 677 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-25 22:37:18,143 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [370 Valid, 138 Invalid, 687 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 677 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-25 22:37:18,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2022-11-25 22:37:18,153 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 151. [2022-11-25 22:37:18,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 149 states have (on average 1.2483221476510067) internal successors, (186), 150 states have internal predecessors, (186), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:37:18,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 186 transitions. [2022-11-25 22:37:18,154 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 186 transitions. Word has length 23 [2022-11-25 22:37:18,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:37:18,155 INFO L495 AbstractCegarLoop]: Abstraction has 151 states and 186 transitions. [2022-11-25 22:37:18,155 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 44 states have (on average 1.5681818181818181) internal successors, (69), 44 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:37:18,155 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 186 transitions. [2022-11-25 22:37:18,156 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-25 22:37:18,162 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:37:18,162 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 1, 1, 1, 1] [2022-11-25 22:37:18,171 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-25 22:37:18,368 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:37:18,368 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:37:18,369 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:37:18,369 INFO L85 PathProgramCache]: Analyzing trace with hash 1583560480, now seen corresponding path program 3 times [2022-11-25 22:37:18,369 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:37:18,369 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [661796550] [2022-11-25 22:37:18,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:37:18,369 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:37:18,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:37:19,471 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 0 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:37:19,471 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:37:19,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [661796550] [2022-11-25 22:37:19,472 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [661796550] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:37:19,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [843167289] [2022-11-25 22:37:19,472 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:37:19,472 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:37:19,472 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:37:19,475 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:37:19,494 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-25 22:37:19,585 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:37:19,585 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:37:19,590 WARN L261 TraceCheckSpWp]: Trace formula consists of 241 conjuncts, 148 conjunts are in the unsatisfiable core [2022-11-25 22:37:19,594 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:37:19,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:37:19,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:37:19,710 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-25 22:37:22,046 INFO L321 Elim1Store]: treesize reduction 12, result has 63.6 percent of original size [2022-11-25 22:37:22,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 7 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 4 case distinctions, treesize of input 65 treesize of output 43 [2022-11-25 22:37:22,314 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 0 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:37:22,315 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:37:25,218 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:37:25,218 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 103 treesize of output 70 [2022-11-25 22:37:25,247 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:37:25,248 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 136 treesize of output 139 [2022-11-25 22:37:25,279 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:37:25,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 108 treesize of output 114 [2022-11-25 22:37:25,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 22:37:25,599 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 0 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:37:25,599 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [843167289] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:37:25,599 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [263152015] [2022-11-25 22:37:25,601 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:37:25,601 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:37:25,601 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:37:25,601 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:37:25,602 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:37:25,627 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:37:25,631 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:37:25,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:37:25,687 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:37:25,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:37:25,958 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:37:28,523 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2202#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_cstrspn_#t~post2#1.base| |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post2#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (= |ULTIMATE.start_cstrspn_~p~0#1.offset| (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:37:28,523 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:37:28,523 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:37:28,523 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 25, 25] total 66 [2022-11-25 22:37:28,523 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [42563993] [2022-11-25 22:37:28,523 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:37:28,524 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 68 states [2022-11-25 22:37:28,524 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:37:28,525 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 68 interpolants. [2022-11-25 22:37:28,526 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=364, Invalid=5488, Unknown=0, NotChecked=0, Total=5852 [2022-11-25 22:37:28,527 INFO L87 Difference]: Start difference. First operand 151 states and 186 transitions. Second operand has 68 states, 67 states have (on average 1.2985074626865671) internal successors, (87), 67 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:38:01,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:38:01,320 INFO L93 Difference]: Finished difference Result 267 states and 317 transitions. [2022-11-25 22:38:01,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 128 states. [2022-11-25 22:38:01,320 INFO L78 Accepts]: Start accepts. Automaton has has 68 states, 67 states have (on average 1.2985074626865671) internal successors, (87), 67 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-25 22:38:01,321 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:38:01,321 INFO L225 Difference]: With dead ends: 267 [2022-11-25 22:38:01,322 INFO L226 Difference]: Without dead ends: 267 [2022-11-25 22:38:01,331 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 227 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 201 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10296 ImplicationChecksByTransitivity, 38.1s TimeCoverageRelationStatistics Valid=3261, Invalid=37745, Unknown=0, NotChecked=0, Total=41006 [2022-11-25 22:38:01,331 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 553 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 1758 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 553 SdHoareTripleChecker+Valid, 98 SdHoareTripleChecker+Invalid, 1815 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 1758 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-25 22:38:01,332 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [553 Valid, 98 Invalid, 1815 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 1758 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-11-25 22:38:01,332 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 267 states. [2022-11-25 22:38:01,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 267 to 229. [2022-11-25 22:38:01,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 229 states, 227 states have (on average 1.2290748898678414) internal successors, (279), 228 states have internal predecessors, (279), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:38:01,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 229 states to 229 states and 279 transitions. [2022-11-25 22:38:01,342 INFO L78 Accepts]: Start accepts. Automaton has 229 states and 279 transitions. Word has length 29 [2022-11-25 22:38:01,342 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:38:01,342 INFO L495 AbstractCegarLoop]: Abstraction has 229 states and 279 transitions. [2022-11-25 22:38:01,342 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 68 states, 67 states have (on average 1.2985074626865671) internal successors, (87), 67 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:38:01,343 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 279 transitions. [2022-11-25 22:38:01,344 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-25 22:38:01,344 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:38:01,344 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1] [2022-11-25 22:38:01,354 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-25 22:38:01,550 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-11-25 22:38:01,550 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:38:01,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:38:01,551 INFO L85 PathProgramCache]: Analyzing trace with hash -151249376, now seen corresponding path program 1 times [2022-11-25 22:38:01,551 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:38:01,551 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2067710721] [2022-11-25 22:38:01,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:38:01,551 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:38:01,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:38:02,390 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 0 proven. 57 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 22:38:02,390 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:38:02,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2067710721] [2022-11-25 22:38:02,391 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2067710721] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:38:02,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [383330239] [2022-11-25 22:38:02,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:38:02,391 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:38:02,391 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:38:02,395 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:38:02,418 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-25 22:38:02,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:38:02,513 WARN L261 TraceCheckSpWp]: Trace formula consists of 259 conjuncts, 139 conjunts are in the unsatisfiable core [2022-11-25 22:38:02,517 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:38:02,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:38:02,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:38:02,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 22:38:04,932 INFO L321 Elim1Store]: treesize reduction 12, result has 72.7 percent of original size [2022-11-25 22:38:04,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 7 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 4 case distinctions, treesize of input 67 treesize of output 51 [2022-11-25 22:38:05,460 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 1 proven. 57 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-25 22:38:05,461 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:38:08,072 WARN L837 $PredicateComparison]: unable to prove that (forall ((|v_ULTIMATE.start_cstrspn_#t~post2#1.offset_58| Int) (v_ArrVal_223 (Array Int Int))) (let ((.cse0 (select v_ArrVal_223 |c_ULTIMATE.start_main_~nondetString2~0#1.offset|)) (.cse1 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_223) |c_ULTIMATE.start_main_~nondetString1~0#1.base|))) (or (< |c_ULTIMATE.start_main_~nondetString1~0#1.offset| |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_58|) (= .cse0 0) (not (<= 0 |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_58|)) (= (select .cse1 (+ 3 |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_58|)) 0) (not (= .cse0 (select .cse1 (+ |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_58| 1)))) (not (= .cse0 (select .cse1 (+ 2 |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_58|)))) (not (= .cse0 (select .cse1 |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_58|))) (<= (+ 5 |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_58|) (select |c_#length| |c_ULTIMATE.start_main_~nondetString1~0#1.base|))))) is different from false [2022-11-25 22:38:08,091 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:38:08,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 100 treesize of output 67 [2022-11-25 22:38:08,121 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:38:08,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 129 treesize of output 148 [2022-11-25 22:38:08,159 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:38:08,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 93 treesize of output 103 [2022-11-25 22:38:08,174 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 22:38:08,439 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 0 proven. 57 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 22:38:08,439 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [383330239] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:38:08,440 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1077485446] [2022-11-25 22:38:08,441 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:38:08,442 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:38:08,442 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:38:08,442 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:38:08,443 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:38:08,468 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:38:08,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:38:08,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:38:08,549 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:38:08,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:38:08,880 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:38:11,263 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3214#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_cstrspn_#t~post2#1.base| |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post2#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (= |ULTIMATE.start_cstrspn_~p~0#1.offset| (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:38:11,263 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:38:11,263 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:38:11,263 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 25, 24] total 61 [2022-11-25 22:38:11,263 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1300494536] [2022-11-25 22:38:11,264 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:38:11,264 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-11-25 22:38:11,264 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:38:11,264 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-11-25 22:38:11,265 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=319, Invalid=4654, Unknown=1, NotChecked=138, Total=5112 [2022-11-25 22:38:11,265 INFO L87 Difference]: Start difference. First operand 229 states and 279 transitions. Second operand has 63 states, 62 states have (on average 1.5161290322580645) internal successors, (94), 62 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:38:32,584 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:38:32,584 INFO L93 Difference]: Finished difference Result 330 states and 395 transitions. [2022-11-25 22:38:32,585 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 75 states. [2022-11-25 22:38:32,585 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 62 states have (on average 1.5161290322580645) internal successors, (94), 62 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-25 22:38:32,585 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:38:32,587 INFO L225 Difference]: With dead ends: 330 [2022-11-25 22:38:32,587 INFO L226 Difference]: Without dead ends: 330 [2022-11-25 22:38:32,589 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 39 SyntacticMatches, 1 SemanticMatches, 143 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 4467 ImplicationChecksByTransitivity, 25.9s TimeCoverageRelationStatistics Valid=1864, Invalid=18731, Unknown=1, NotChecked=284, Total=20880 [2022-11-25 22:38:32,590 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 616 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1426 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 616 SdHoareTripleChecker+Valid, 100 SdHoareTripleChecker+Invalid, 1547 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 1426 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 71 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:38:32,590 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [616 Valid, 100 Invalid, 1547 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 1426 Invalid, 0 Unknown, 71 Unchecked, 2.1s Time] [2022-11-25 22:38:32,591 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 330 states. [2022-11-25 22:38:32,597 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 330 to 205. [2022-11-25 22:38:32,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 205 states, 203 states have (on average 1.2413793103448276) internal successors, (252), 204 states have internal predecessors, (252), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:38:32,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 205 states to 205 states and 252 transitions. [2022-11-25 22:38:32,598 INFO L78 Accepts]: Start accepts. Automaton has 205 states and 252 transitions. Word has length 33 [2022-11-25 22:38:32,599 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:38:32,599 INFO L495 AbstractCegarLoop]: Abstraction has 205 states and 252 transitions. [2022-11-25 22:38:32,599 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 62 states have (on average 1.5161290322580645) internal successors, (94), 62 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:38:32,599 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 252 transitions. [2022-11-25 22:38:32,601 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-25 22:38:32,601 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:38:32,601 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 5, 5, 1, 1, 1, 1, 1] [2022-11-25 22:38:32,619 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-25 22:38:32,806 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-11-25 22:38:32,807 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:38:32,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:38:32,807 INFO L85 PathProgramCache]: Analyzing trace with hash -685970940, now seen corresponding path program 2 times [2022-11-25 22:38:32,807 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:38:32,807 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1078676639] [2022-11-25 22:38:32,807 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:38:32,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:38:32,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:38:34,232 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 0 proven. 86 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:38:34,233 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:38:34,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1078676639] [2022-11-25 22:38:34,233 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1078676639] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:38:34,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1516699269] [2022-11-25 22:38:34,233 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:38:34,233 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:38:34,233 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:38:34,235 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:38:34,254 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-25 22:38:34,382 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-25 22:38:34,383 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:38:34,387 WARN L261 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 155 conjunts are in the unsatisfiable core [2022-11-25 22:38:34,391 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:38:34,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:38:34,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:38:34,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 22:38:53,019 INFO L321 Elim1Store]: treesize reduction 28, result has 81.0 percent of original size [2022-11-25 22:38:53,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 1 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 15 case distinctions, treesize of input 68 treesize of output 141 [2022-11-25 22:38:57,739 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 0 proven. 89 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 22:38:57,739 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:39:03,825 WARN L837 $PredicateComparison]: unable to prove that (forall ((|v_ULTIMATE.start_cstrspn_#t~post2#1.offset_70| Int) (|v_ULTIMATE.start_cstrspn_~p~0#1.offset_71| Int) (|v_ULTIMATE.start_cstrspn_#t~post2#1.offset_73| Int) (|v_ULTIMATE.start_cstrspn_#t~post2#1.offset_72| Int) (v_ArrVal_246 (Array Int Int)) (|v_ULTIMATE.start_cstrspn_#t~post2#1.offset_71| Int)) (let ((.cse1 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_246) |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (.cse0 (select v_ArrVal_246 |c_ULTIMATE.start_main_~nondetString2~0#1.offset|))) (or (< (+ |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_73| 1) |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_72|) (not (<= 1 |v_ULTIMATE.start_cstrspn_~p~0#1.offset_71|)) (< (+ |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_72| 1) |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_71|) (not (= .cse0 (select .cse1 (+ (- 1) |v_ULTIMATE.start_cstrspn_~p~0#1.offset_71|)))) (= (select .cse1 |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_70|) 0) (<= (+ |v_ULTIMATE.start_cstrspn_~p~0#1.offset_71| 1) (select |c_#length| |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (< (+ 2 |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_70|) |v_ULTIMATE.start_cstrspn_~p~0#1.offset_71|) (not (= .cse0 (select .cse1 |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_73|))) (< |c_ULTIMATE.start_main_~nondetString1~0#1.offset| |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_73|) (not (= .cse0 (select .cse1 |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_71|))) (not (= .cse0 (select .cse1 |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_72|))) (= .cse0 0) (< (+ |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_71| 1) |v_ULTIMATE.start_cstrspn_#t~post2#1.offset_70|)))) is different from false [2022-11-25 22:39:03,866 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:39:03,866 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 120 treesize of output 76 [2022-11-25 22:39:03,983 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:39:03,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 149 treesize of output 266 [2022-11-25 22:39:04,130 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:39:04,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 113 treesize of output 213 [2022-11-25 22:39:04,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 22:39:10,267 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 0 proven. 87 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 22:39:10,267 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1516699269] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:39:10,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1008293565] [2022-11-25 22:39:10,269 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:39:10,269 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:39:10,270 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:39:10,270 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:39:10,270 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:39:10,296 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:39:10,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:39:10,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:39:10,354 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:39:10,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:39:10,708 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:39:13,437 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4211#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_cstrspn_#t~post2#1.base| |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post2#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (= |ULTIMATE.start_cstrspn_~p~0#1.offset| (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:39:13,437 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:39:13,437 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:39:13,437 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 30, 29] total 76 [2022-11-25 22:39:13,437 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1597585835] [2022-11-25 22:39:13,438 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:39:13,438 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 78 states [2022-11-25 22:39:13,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:39:13,439 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 78 interpolants. [2022-11-25 22:39:13,440 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=475, Invalid=6832, Unknown=7, NotChecked=168, Total=7482 [2022-11-25 22:39:13,440 INFO L87 Difference]: Start difference. First operand 205 states and 252 transitions. Second operand has 78 states, 77 states have (on average 1.4545454545454546) internal successors, (112), 77 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:41:21,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:41:21,619 INFO L93 Difference]: Finished difference Result 718 states and 864 transitions. [2022-11-25 22:41:21,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 161 states. [2022-11-25 22:41:21,619 INFO L78 Accepts]: Start accepts. Automaton has has 78 states, 77 states have (on average 1.4545454545454546) internal successors, (112), 77 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-25 22:41:21,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:41:21,623 INFO L225 Difference]: With dead ends: 718 [2022-11-25 22:41:21,623 INFO L226 Difference]: Without dead ends: 718 [2022-11-25 22:41:21,629 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 292 GetRequests, 47 SyntacticMatches, 1 SemanticMatches, 244 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 17150 ImplicationChecksByTransitivity, 144.8s TimeCoverageRelationStatistics Valid=5154, Invalid=54621, Unknown=9, NotChecked=486, Total=60270 [2022-11-25 22:41:21,629 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 1225 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 2431 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1225 SdHoareTripleChecker+Valid, 67 SdHoareTripleChecker+Invalid, 2622 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 2431 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 114 IncrementalHoareTripleChecker+Unchecked, 8.6s IncrementalHoareTripleChecker+Time [2022-11-25 22:41:21,630 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1225 Valid, 67 Invalid, 2622 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 2431 Invalid, 0 Unknown, 114 Unchecked, 8.6s Time] [2022-11-25 22:41:21,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 718 states. [2022-11-25 22:41:21,641 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 718 to 471. [2022-11-25 22:41:21,641 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 471 states, 469 states have (on average 1.232409381663113) internal successors, (578), 470 states have internal predecessors, (578), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:41:21,643 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 471 states to 471 states and 578 transitions. [2022-11-25 22:41:21,643 INFO L78 Accepts]: Start accepts. Automaton has 471 states and 578 transitions. Word has length 39 [2022-11-25 22:41:21,644 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:41:21,644 INFO L495 AbstractCegarLoop]: Abstraction has 471 states and 578 transitions. [2022-11-25 22:41:21,644 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 78 states, 77 states have (on average 1.4545454545454546) internal successors, (112), 77 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:41:21,644 INFO L276 IsEmpty]: Start isEmpty. Operand 471 states and 578 transitions. [2022-11-25 22:41:21,646 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-25 22:41:21,646 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:41:21,647 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 1, 1, 1, 1, 1, 1] [2022-11-25 22:41:21,653 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-25 22:41:21,852 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:41:21,853 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:41:21,853 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:41:21,853 INFO L85 PathProgramCache]: Analyzing trace with hash -1641118474, now seen corresponding path program 4 times [2022-11-25 22:41:21,853 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:41:21,853 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [556011557] [2022-11-25 22:41:21,854 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:41:21,854 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:41:21,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:41:22,984 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 0 proven. 128 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:41:22,985 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:41:22,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [556011557] [2022-11-25 22:41:22,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [556011557] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:41:22,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1144595584] [2022-11-25 22:41:22,985 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:41:22,985 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:41:22,985 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:41:22,993 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:41:22,999 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-25 22:41:23,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:41:23,118 WARN L261 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 128 conjunts are in the unsatisfiable core [2022-11-25 22:41:23,121 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:41:23,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:41:26,909 INFO L321 Elim1Store]: treesize reduction 28, result has 68.2 percent of original size [2022-11-25 22:41:26,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 8 case distinctions, treesize of input 90 treesize of output 94 [2022-11-25 22:41:26,919 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-25 22:41:26,942 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-25 22:41:27,270 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 0 proven. 128 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:41:27,271 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:41:32,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 103 [2022-11-25 22:41:32,269 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 28 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 0 case distinctions, treesize of input 183 treesize of output 153 [2022-11-25 22:41:32,276 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-25 22:41:32,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 23 [2022-11-25 22:41:32,328 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 0 proven. 128 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:41:32,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1144595584] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:41:32,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2036805683] [2022-11-25 22:41:32,330 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:41:32,330 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:41:32,330 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:41:32,330 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:41:32,331 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:41:32,357 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:41:32,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:41:32,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:41:32,416 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:41:32,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:41:32,553 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:41:35,998 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6028#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (= |ULTIMATE.start_cstrspn_~spanp~0#1.base| |ULTIMATE.start_cstrspn_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstrspn_~p~0#1.offset| 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_cstrspn_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (= (+ |ULTIMATE.start_cstrspn_#t~post4#1.offset| 1) |ULTIMATE.start_cstrspn_~spanp~0#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post4#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:41:35,998 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:41:35,998 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:41:35,998 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 28, 28] total 70 [2022-11-25 22:41:35,998 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1783025173] [2022-11-25 22:41:35,999 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:41:35,999 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 72 states [2022-11-25 22:41:35,999 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:41:36,000 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 72 interpolants. [2022-11-25 22:41:36,000 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=525, Invalid=5955, Unknown=0, NotChecked=0, Total=6480 [2022-11-25 22:41:36,001 INFO L87 Difference]: Start difference. First operand 471 states and 578 transitions. Second operand has 72 states, 71 states have (on average 1.619718309859155) internal successors, (115), 71 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:41:59,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:41:59,271 INFO L93 Difference]: Finished difference Result 1106 states and 1307 transitions. [2022-11-25 22:41:59,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-11-25 22:41:59,272 INFO L78 Accepts]: Start accepts. Automaton has has 72 states, 71 states have (on average 1.619718309859155) internal successors, (115), 71 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-25 22:41:59,272 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:41:59,275 INFO L225 Difference]: With dead ends: 1106 [2022-11-25 22:41:59,275 INFO L226 Difference]: Without dead ends: 1106 [2022-11-25 22:41:59,277 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 179 GetRequests, 50 SyntacticMatches, 1 SemanticMatches, 128 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2577 ImplicationChecksByTransitivity, 31.1s TimeCoverageRelationStatistics Valid=1815, Invalid=14955, Unknown=0, NotChecked=0, Total=16770 [2022-11-25 22:41:59,277 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 938 mSDsluCounter, 321 mSDsCounter, 0 mSdLazyCounter, 1971 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 938 SdHoareTripleChecker+Valid, 332 SdHoareTripleChecker+Invalid, 1994 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 1971 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-25 22:41:59,278 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [938 Valid, 332 Invalid, 1994 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 1971 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-11-25 22:41:59,279 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1106 states. [2022-11-25 22:41:59,302 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1106 to 791. [2022-11-25 22:41:59,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 791 states, 789 states have (on average 1.2395437262357414) internal successors, (978), 790 states have internal predecessors, (978), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:41:59,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 791 states to 791 states and 978 transitions. [2022-11-25 22:41:59,306 INFO L78 Accepts]: Start accepts. Automaton has 791 states and 978 transitions. Word has length 39 [2022-11-25 22:41:59,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:41:59,307 INFO L495 AbstractCegarLoop]: Abstraction has 791 states and 978 transitions. [2022-11-25 22:41:59,307 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 72 states, 71 states have (on average 1.619718309859155) internal successors, (115), 71 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:41:59,307 INFO L276 IsEmpty]: Start isEmpty. Operand 791 states and 978 transitions. [2022-11-25 22:41:59,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-25 22:41:59,309 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:41:59,309 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 6, 5, 5, 3, 1, 1, 1, 1] [2022-11-25 22:41:59,322 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-25 22:41:59,519 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-11-25 22:41:59,519 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:41:59,519 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:41:59,520 INFO L85 PathProgramCache]: Analyzing trace with hash 1111635972, now seen corresponding path program 3 times [2022-11-25 22:41:59,520 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:41:59,520 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [16713999] [2022-11-25 22:41:59,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:41:59,520 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:41:59,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:42:01,523 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 0 proven. 138 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 22:42:01,524 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:42:01,524 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [16713999] [2022-11-25 22:42:01,524 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [16713999] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:42:01,524 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [736452452] [2022-11-25 22:42:01,524 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 22:42:01,524 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:42:01,524 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:42:01,525 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:42:01,527 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-25 22:42:01,652 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 22:42:01,653 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:42:01,658 WARN L261 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 186 conjunts are in the unsatisfiable core [2022-11-25 22:42:01,666 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:42:01,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:42:01,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:42:01,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:42:07,583 INFO L321 Elim1Store]: treesize reduction 16, result has 70.9 percent of original size [2022-11-25 22:42:07,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 11 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 6 case distinctions, treesize of input 101 treesize of output 68 [2022-11-25 22:42:08,028 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 0 proven. 142 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:42:08,028 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:42:14,824 INFO L321 Elim1Store]: treesize reduction 88, result has 54.4 percent of original size [2022-11-25 22:42:14,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 6 new quantified variables, introduced 6 case distinctions, treesize of input 1525 treesize of output 1211 [2022-11-25 22:42:14,866 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:42:14,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 1211 treesize of output 1139 [2022-11-25 22:42:14,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 22:42:15,414 INFO L321 Elim1Store]: treesize reduction 39, result has 36.1 percent of original size [2022-11-25 22:42:15,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 5 case distinctions, treesize of input 337 treesize of output 335 [2022-11-25 22:42:15,757 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:42:15,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 10 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 18 case distinctions, treesize of input 516 treesize of output 617 [2022-11-25 22:42:30,981 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 0 proven. 142 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:42:30,981 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [736452452] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:42:30,981 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [357931249] [2022-11-25 22:42:30,983 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:42:30,983 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:42:30,983 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:42:30,983 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:42:30,984 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:42:31,007 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:42:31,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:42:31,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:42:31,069 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:42:31,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:42:31,368 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:42:34,617 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8400#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_cstrspn_#t~post2#1.base| |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post2#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (= |ULTIMATE.start_cstrspn_~p~0#1.offset| (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:42:34,617 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:42:34,617 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:42:34,617 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 34, 34] total 90 [2022-11-25 22:42:34,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1328962540] [2022-11-25 22:42:34,618 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:42:34,618 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 92 states [2022-11-25 22:42:34,618 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:42:34,619 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 92 interpolants. [2022-11-25 22:42:34,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=531, Invalid=9569, Unknown=0, NotChecked=0, Total=10100 [2022-11-25 22:42:34,620 INFO L87 Difference]: Start difference. First operand 791 states and 978 transitions. Second operand has 92 states, 91 states have (on average 1.5164835164835164) internal successors, (138), 91 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:45:50,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:45:50,384 INFO L93 Difference]: Finished difference Result 1209 states and 1466 transitions. [2022-11-25 22:45:50,384 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 301 states. [2022-11-25 22:45:50,385 INFO L78 Accepts]: Start accepts. Automaton has has 92 states, 91 states have (on average 1.5164835164835164) internal successors, (138), 91 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-25 22:45:50,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:45:50,388 INFO L225 Difference]: With dead ends: 1209 [2022-11-25 22:45:50,389 INFO L226 Difference]: Without dead ends: 1209 [2022-11-25 22:45:50,399 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 459 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 397 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52416 ImplicationChecksByTransitivity, 197.3s TimeCoverageRelationStatistics Valid=9383, Invalid=149419, Unknown=0, NotChecked=0, Total=158802 [2022-11-25 22:45:50,399 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 1169 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 6850 mSolverCounterSat, 155 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1169 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 7005 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 155 IncrementalHoareTripleChecker+Valid, 6850 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.3s IncrementalHoareTripleChecker+Time [2022-11-25 22:45:50,400 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1169 Valid, 125 Invalid, 7005 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [155 Valid, 6850 Invalid, 0 Unknown, 0 Unchecked, 12.3s Time] [2022-11-25 22:45:50,401 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1209 states. [2022-11-25 22:45:50,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1209 to 1145. [2022-11-25 22:45:50,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1145 states, 1143 states have (on average 1.2300962379702538) internal successors, (1406), 1144 states have internal predecessors, (1406), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:45:50,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1145 states to 1145 states and 1406 transitions. [2022-11-25 22:45:50,425 INFO L78 Accepts]: Start accepts. Automaton has 1145 states and 1406 transitions. Word has length 47 [2022-11-25 22:45:50,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:45:50,425 INFO L495 AbstractCegarLoop]: Abstraction has 1145 states and 1406 transitions. [2022-11-25 22:45:50,426 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 92 states, 91 states have (on average 1.5164835164835164) internal successors, (138), 91 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:45:50,426 INFO L276 IsEmpty]: Start isEmpty. Operand 1145 states and 1406 transitions. [2022-11-25 22:45:50,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-25 22:45:50,428 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:45:50,428 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 7, 6, 6, 2, 1, 1, 1, 1] [2022-11-25 22:45:50,435 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-25 22:45:50,633 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:45:50,634 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:45:50,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:45:50,634 INFO L85 PathProgramCache]: Analyzing trace with hash -1170265112, now seen corresponding path program 4 times [2022-11-25 22:45:50,634 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:45:50,634 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [766129957] [2022-11-25 22:45:50,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:45:50,634 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:45:50,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:45:51,898 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 0 proven. 147 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-11-25 22:45:51,898 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:45:51,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [766129957] [2022-11-25 22:45:51,898 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [766129957] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:45:51,899 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1458525922] [2022-11-25 22:45:51,899 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:45:51,899 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:45:51,899 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:45:51,901 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:45:51,902 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-25 22:45:52,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:45:52,026 INFO L263 TraceCheckSpWp]: Trace formula consists of 351 conjuncts, 111 conjunts are in the unsatisfiable core [2022-11-25 22:45:52,031 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:45:52,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:45:52,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:45:52,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 22:45:55,731 INFO L321 Elim1Store]: treesize reduction 20, result has 69.7 percent of original size [2022-11-25 22:45:55,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 6 case distinctions, treesize of input 70 treesize of output 72 [2022-11-25 22:45:55,738 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-25 22:45:56,278 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 2 proven. 146 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-25 22:45:56,278 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:46:00,938 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:46:00,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 137 treesize of output 82 [2022-11-25 22:46:00,992 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:46:00,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 6 case distinctions, treesize of input 158 treesize of output 189 [2022-11-25 22:46:01,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 15 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 0 case distinctions, treesize of input 65 treesize of output 43 [2022-11-25 22:46:01,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 22:46:01,172 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-25 22:46:01,360 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 0 proven. 148 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-25 22:46:01,360 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1458525922] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:46:01,360 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [861875031] [2022-11-25 22:46:01,362 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:46:01,362 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:46:01,362 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:46:01,362 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:46:01,363 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:46:01,390 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:46:01,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:46:01,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:46:01,452 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:46:01,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:46:01,746 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:46:04,820 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11719#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_cstrspn_#t~post2#1.base| |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post2#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (= |ULTIMATE.start_cstrspn_~p~0#1.offset| (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:46:04,820 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:46:04,821 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:46:04,821 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 28, 28] total 70 [2022-11-25 22:46:04,821 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [799256150] [2022-11-25 22:46:04,821 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:46:04,821 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 72 states [2022-11-25 22:46:04,821 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:46:04,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 72 interpolants. [2022-11-25 22:46:04,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=490, Invalid=5989, Unknown=1, NotChecked=0, Total=6480 [2022-11-25 22:46:04,823 INFO L87 Difference]: Start difference. First operand 1145 states and 1406 transitions. Second operand has 72 states, 71 states have (on average 1.8873239436619718) internal successors, (134), 71 states have internal predecessors, (134), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:46:27,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:46:27,071 INFO L93 Difference]: Finished difference Result 2140 states and 2624 transitions. [2022-11-25 22:46:27,071 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-11-25 22:46:27,072 INFO L78 Accepts]: Start accepts. Automaton has has 72 states, 71 states have (on average 1.8873239436619718) internal successors, (134), 71 states have internal predecessors, (134), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-25 22:46:27,072 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:46:27,078 INFO L225 Difference]: With dead ends: 2140 [2022-11-25 22:46:27,078 INFO L226 Difference]: Without dead ends: 2140 [2022-11-25 22:46:27,080 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 213 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 133 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3543 ImplicationChecksByTransitivity, 29.3s TimeCoverageRelationStatistics Valid=1864, Invalid=16225, Unknown=1, NotChecked=0, Total=18090 [2022-11-25 22:46:27,080 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 867 mSDsluCounter, 550 mSDsCounter, 0 mSdLazyCounter, 1621 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 867 SdHoareTripleChecker+Valid, 568 SdHoareTripleChecker+Invalid, 1663 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 1621 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2022-11-25 22:46:27,081 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [867 Valid, 568 Invalid, 1663 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 1621 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2022-11-25 22:46:27,083 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2140 states. [2022-11-25 22:46:27,107 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2140 to 823. [2022-11-25 22:46:27,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 823 states, 821 states have (on average 1.2496954933008526) internal successors, (1026), 822 states have internal predecessors, (1026), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:46:27,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 823 states to 823 states and 1026 transitions. [2022-11-25 22:46:27,111 INFO L78 Accepts]: Start accepts. Automaton has 823 states and 1026 transitions. Word has length 49 [2022-11-25 22:46:27,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:46:27,111 INFO L495 AbstractCegarLoop]: Abstraction has 823 states and 1026 transitions. [2022-11-25 22:46:27,111 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 72 states, 71 states have (on average 1.8873239436619718) internal successors, (134), 71 states have internal predecessors, (134), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:46:27,112 INFO L276 IsEmpty]: Start isEmpty. Operand 823 states and 1026 transitions. [2022-11-25 22:46:27,113 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-11-25 22:46:27,113 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:46:27,113 INFO L195 NwaCegarLoop]: trace histogram [17, 16, 16, 16, 1, 1, 1, 1, 1, 1] [2022-11-25 22:46:27,130 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-25 22:46:27,319 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:46:27,320 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:46:27,320 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:46:27,320 INFO L85 PathProgramCache]: Analyzing trace with hash 1126788342, now seen corresponding path program 5 times [2022-11-25 22:46:27,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:46:27,320 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1266958049] [2022-11-25 22:46:27,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:46:27,321 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:46:27,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:46:29,584 INFO L134 CoverageAnalysis]: Checked inductivity of 512 backedges. 0 proven. 512 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:46:29,584 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:46:29,584 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1266958049] [2022-11-25 22:46:29,585 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1266958049] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:46:29,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1830289250] [2022-11-25 22:46:29,585 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 22:46:29,585 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:46:29,585 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:46:29,586 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:46:29,588 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-25 22:46:29,795 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 17 check-sat command(s) [2022-11-25 22:46:29,795 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 22:46:29,799 INFO L263 TraceCheckSpWp]: Trace formula consists of 399 conjuncts, 98 conjunts are in the unsatisfiable core [2022-11-25 22:46:29,801 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:46:29,831 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 22:46:29,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 22:46:29,906 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 22:46:31,693 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:46:31,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 22 treesize of output 19 [2022-11-25 22:46:32,018 INFO L134 CoverageAnalysis]: Checked inductivity of 512 backedges. 15 proven. 62 refuted. 0 times theorem prover too weak. 435 trivial. 0 not checked. [2022-11-25 22:46:32,018 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:46:33,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-25 22:46:33,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 16 [2022-11-25 22:46:33,518 INFO L134 CoverageAnalysis]: Checked inductivity of 512 backedges. 0 proven. 77 refuted. 0 times theorem prover too weak. 435 trivial. 0 not checked. [2022-11-25 22:46:33,518 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1830289250] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:46:33,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1943039111] [2022-11-25 22:46:33,519 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:46:33,520 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:46:33,520 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:46:33,520 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:46:33,520 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:46:33,539 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:46:33,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:46:33,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:46:33,614 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:46:33,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:46:33,743 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:46:36,592 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15258#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (= |ULTIMATE.start_cstrspn_~spanp~0#1.base| |ULTIMATE.start_cstrspn_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstrspn_~p~0#1.offset| 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_cstrspn_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (= (+ |ULTIMATE.start_cstrspn_#t~post4#1.offset| 1) |ULTIMATE.start_cstrspn_~spanp~0#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post4#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:46:36,592 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:46:36,592 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:46:36,593 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 7, 7] total 37 [2022-11-25 22:46:36,593 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1752497652] [2022-11-25 22:46:36,593 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:46:36,593 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-11-25 22:46:36,593 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:46:36,593 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-11-25 22:46:36,594 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=149, Invalid=2107, Unknown=0, NotChecked=0, Total=2256 [2022-11-25 22:46:36,594 INFO L87 Difference]: Start difference. First operand 823 states and 1026 transitions. Second operand has 39 states, 38 states have (on average 2.6578947368421053) internal successors, (101), 38 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:47:16,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 22:47:16,021 INFO L93 Difference]: Finished difference Result 1209 states and 1401 transitions. [2022-11-25 22:47:16,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-11-25 22:47:16,022 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 38 states have (on average 2.6578947368421053) internal successors, (101), 38 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 71 [2022-11-25 22:47:16,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 22:47:16,024 INFO L225 Difference]: With dead ends: 1209 [2022-11-25 22:47:16,024 INFO L226 Difference]: Without dead ends: 1209 [2022-11-25 22:47:16,025 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 287 GetRequests, 188 SyntacticMatches, 0 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1396 ImplicationChecksByTransitivity, 42.8s TimeCoverageRelationStatistics Valid=1978, Invalid=8122, Unknown=0, NotChecked=0, Total=10100 [2022-11-25 22:47:16,026 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 118 mSDsluCounter, 641 mSDsCounter, 0 mSdLazyCounter, 1450 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 690 SdHoareTripleChecker+Invalid, 1452 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 1450 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-25 22:47:16,026 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 690 Invalid, 1452 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 1450 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-25 22:47:16,028 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1209 states. [2022-11-25 22:47:16,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1209 to 78. [2022-11-25 22:47:16,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 77 states have (on average 1.1688311688311688) internal successors, (90), 77 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:47:16,034 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 90 transitions. [2022-11-25 22:47:16,034 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 90 transitions. Word has length 71 [2022-11-25 22:47:16,034 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 22:47:16,035 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 90 transitions. [2022-11-25 22:47:16,035 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 38 states have (on average 2.6578947368421053) internal successors, (101), 38 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 22:47:16,035 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 90 transitions. [2022-11-25 22:47:16,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2022-11-25 22:47:16,036 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 22:47:16,036 INFO L195 NwaCegarLoop]: trace histogram [13, 12, 12, 12, 12, 12, 1, 1, 1, 1] [2022-11-25 22:47:16,048 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-25 22:47:16,243 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:47:16,243 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-25 22:47:16,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 22:47:16,243 INFO L85 PathProgramCache]: Analyzing trace with hash 1393566272, now seen corresponding path program 4 times [2022-11-25 22:47:16,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 22:47:16,243 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [670958296] [2022-11-25 22:47:16,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 22:47:16,244 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 22:47:16,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:47:18,851 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 0 proven. 420 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:47:18,851 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 22:47:18,851 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [670958296] [2022-11-25 22:47:18,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [670958296] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 22:47:18,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1125337749] [2022-11-25 22:47:18,852 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 22:47:18,852 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 22:47:18,852 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 22:47:18,853 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 22:47:18,855 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb97b6a3-a8b8-4377-a7f2-d9a85008e183/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-25 22:47:19,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 22:47:19,023 WARN L261 TraceCheckSpWp]: Trace formula consists of 537 conjuncts, 344 conjunts are in the unsatisfiable core [2022-11-25 22:47:19,028 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 22:47:19,040 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 22:47:19,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:47:19,218 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 22 [2022-11-25 22:47:37,693 INFO L321 Elim1Store]: treesize reduction 48, result has 54.3 percent of original size [2022-11-25 22:47:37,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 15 select indices, 15 select index equivalence classes, 67 disjoint index pairs (out of 105 index pairs), introduced 15 new quantified variables, introduced 13 case distinctions, treesize of input 162 treesize of output 106 [2022-11-25 22:47:37,709 WARN L718 sPolynomialRelations]: Constructing 4096(two to the power of 12 dual juncts. [2022-11-25 22:47:37,848 WARN L718 sPolynomialRelations]: Constructing 2048(two to the power of 11 dual juncts. [2022-11-25 22:47:38,629 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 0 proven. 420 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:47:38,630 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 22:48:08,031 INFO L321 Elim1Store]: treesize reduction 226, result has 36.5 percent of original size [2022-11-25 22:48:08,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 12 select indices, 12 select index equivalence classes, 66 disjoint index pairs (out of 66 index pairs), introduced 13 new quantified variables, introduced 79 case distinctions, treesize of input 1943 treesize of output 1463 [2022-11-25 22:48:08,086 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 22:48:08,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 1415 treesize of output 1299 [2022-11-25 22:48:08,200 INFO L321 Elim1Store]: treesize reduction 96, result has 1.0 percent of original size [2022-11-25 22:48:08,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 13 select indices, 13 select index equivalence classes, 66 disjoint index pairs (out of 78 index pairs), introduced 13 new quantified variables, introduced 12 case distinctions, treesize of input 1280 treesize of output 1229 [2022-11-25 22:48:09,044 INFO L321 Elim1Store]: treesize reduction 60, result has 73.6 percent of original size [2022-11-25 22:48:09,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 14 select indices, 14 select index equivalence classes, 66 disjoint index pairs (out of 91 index pairs), introduced 14 new quantified variables, introduced 25 case distinctions, treesize of input 481 treesize of output 524 [2022-11-25 22:48:12,052 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 22:48:12,535 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 0 proven. 420 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 22:48:12,535 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1125337749] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 22:48:12,535 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [95188114] [2022-11-25 22:48:12,537 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 22:48:12,537 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 22:48:12,537 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 22:48:12,537 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 22:48:12,538 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 22:48:12,564 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:48:12,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 22:48:12,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 22:48:12,628 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 22:48:12,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 22:48:12,840 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 22:48:18,931 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17273#(and (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.base|) (= |ULTIMATE.start_cstrspn_#t~post2#1.base| |ULTIMATE.start_cstrspn_~p~0#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.offset|) (< (select |#length| |ULTIMATE.start_cstrspn_#t~post2#1.base|) (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrspn_#in~s2#1.offset|) (<= |ULTIMATE.start_cstrspn_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc9#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstrspn_~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s1#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc9#1.base|) (= |ULTIMATE.start_cstrspn_~p~0#1.offset| (+ |ULTIMATE.start_cstrspn_#t~post2#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrspn_~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrspn_#in~s1#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= |ULTIMATE.start_cstrspn_~s2#1.offset| 0) (<= |ULTIMATE.start_cstrspn_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 |ULTIMATE.start_cstrspn_#t~post2#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 22:48:18,931 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 22:48:18,931 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 22:48:18,931 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 65, 66] total 155 [2022-11-25 22:48:18,932 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1138447145] [2022-11-25 22:48:18,932 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 22:48:18,932 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 157 states [2022-11-25 22:48:18,933 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 22:48:18,934 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 157 interpolants. [2022-11-25 22:48:18,935 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1639, Invalid=25751, Unknown=0, NotChecked=0, Total=27390 [2022-11-25 22:48:18,936 INFO L87 Difference]: Start difference. First operand 78 states and 90 transitions. Second operand has 157 states, 156 states have (on average 1.4807692307692308) internal successors, (231), 156 states have internal predecessors, (231), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)