./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4cb6276eff0c60579b1d5f7034948eb4f53891709ff48cdd11b3329ec3c4cc2e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 23:53:26,026 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 23:53:26,028 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 23:53:26,056 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 23:53:26,057 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 23:53:26,058 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 23:53:26,059 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 23:53:26,061 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 23:53:26,062 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 23:53:26,063 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 23:53:26,064 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 23:53:26,066 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 23:53:26,066 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 23:53:26,067 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 23:53:26,068 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 23:53:26,069 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 23:53:26,070 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 23:53:26,071 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 23:53:26,073 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 23:53:26,075 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 23:53:26,076 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 23:53:26,083 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 23:53:26,084 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 23:53:26,085 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 23:53:26,089 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 23:53:26,093 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 23:53:26,093 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 23:53:26,094 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 23:53:26,094 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 23:53:26,095 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 23:53:26,096 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 23:53:26,097 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 23:53:26,098 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 23:53:26,099 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 23:53:26,100 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 23:53:26,100 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 23:53:26,101 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 23:53:26,101 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 23:53:26,102 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 23:53:26,103 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 23:53:26,104 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 23:53:26,105 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-25 23:53:26,126 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 23:53:26,127 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 23:53:26,127 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 23:53:26,127 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 23:53:26,128 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 23:53:26,128 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 23:53:26,129 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-25 23:53:26,129 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-25 23:53:26,129 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-25 23:53:26,129 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-25 23:53:26,130 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-25 23:53:26,130 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-25 23:53:26,130 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-25 23:53:26,130 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-25 23:53:26,131 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-25 23:53:26,131 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-25 23:53:26,131 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-25 23:53:26,131 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-25 23:53:26,132 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 23:53:26,132 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 23:53:26,133 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 23:53:26,133 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 23:53:26,133 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-25 23:53:26,133 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 23:53:26,134 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 23:53:26,134 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 23:53:26,134 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-25 23:53:26,134 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-25 23:53:26,135 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-25 23:53:26,135 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 23:53:26,135 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-25 23:53:26,135 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 23:53:26,136 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 23:53:26,136 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 23:53:26,136 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 23:53:26,136 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 23:53:26,137 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 23:53:26,137 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-25 23:53:26,137 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 23:53:26,137 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-25 23:53:26,138 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 23:53:26,138 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-25 23:53:26,138 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4cb6276eff0c60579b1d5f7034948eb4f53891709ff48cdd11b3329ec3c4cc2e [2022-11-25 23:53:26,400 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 23:53:26,428 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 23:53:26,432 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 23:53:26,433 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 23:53:26,434 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 23:53:26,436 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i [2022-11-25 23:53:29,593 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 23:53:29,919 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 23:53:29,919 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/sv-benchmarks/c/array-memsafety/substring-alloca-2.i [2022-11-25 23:53:29,936 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/data/f96e0f0a6/c7506801b5f1479d8068c1fb76771b5b/FLAG76d5f1693 [2022-11-25 23:53:29,955 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/data/f96e0f0a6/c7506801b5f1479d8068c1fb76771b5b [2022-11-25 23:53:29,960 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 23:53:29,963 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 23:53:29,968 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 23:53:29,968 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 23:53:29,971 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 23:53:29,972 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 11:53:29" (1/1) ... [2022-11-25 23:53:29,973 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@74f7b463 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:29, skipping insertion in model container [2022-11-25 23:53:29,974 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 11:53:29" (1/1) ... [2022-11-25 23:53:29,982 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 23:53:30,033 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 23:53:30,366 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 23:53:30,380 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 23:53:30,451 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 23:53:30,478 INFO L208 MainTranslator]: Completed translation [2022-11-25 23:53:30,479 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30 WrapperNode [2022-11-25 23:53:30,479 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 23:53:30,480 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 23:53:30,480 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 23:53:30,480 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 23:53:30,487 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (1/1) ... [2022-11-25 23:53:30,500 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (1/1) ... [2022-11-25 23:53:30,522 INFO L138 Inliner]: procedures = 117, calls = 18, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 103 [2022-11-25 23:53:30,523 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 23:53:30,523 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 23:53:30,524 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 23:53:30,524 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 23:53:30,534 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (1/1) ... [2022-11-25 23:53:30,534 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (1/1) ... [2022-11-25 23:53:30,538 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (1/1) ... [2022-11-25 23:53:30,538 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (1/1) ... [2022-11-25 23:53:30,545 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (1/1) ... [2022-11-25 23:53:30,549 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (1/1) ... [2022-11-25 23:53:30,551 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (1/1) ... [2022-11-25 23:53:30,552 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (1/1) ... [2022-11-25 23:53:30,555 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 23:53:30,556 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 23:53:30,556 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 23:53:30,556 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 23:53:30,557 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (1/1) ... [2022-11-25 23:53:30,565 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 23:53:30,580 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:30,593 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 23:53:30,595 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 23:53:30,632 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-25 23:53:30,632 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-25 23:53:30,632 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-25 23:53:30,632 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-25 23:53:30,633 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 23:53:30,633 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 23:53:30,754 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 23:53:30,757 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 23:53:31,130 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 23:53:31,251 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 23:53:31,251 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-25 23:53:31,254 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 11:53:31 BoogieIcfgContainer [2022-11-25 23:53:31,254 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 23:53:31,256 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 23:53:31,257 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 23:53:31,261 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 23:53:31,261 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 11:53:29" (1/3) ... [2022-11-25 23:53:31,262 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@507dda94 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 11:53:31, skipping insertion in model container [2022-11-25 23:53:31,262 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:53:30" (2/3) ... [2022-11-25 23:53:31,263 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@507dda94 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 11:53:31, skipping insertion in model container [2022-11-25 23:53:31,263 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 11:53:31" (3/3) ... [2022-11-25 23:53:31,264 INFO L112 eAbstractionObserver]: Analyzing ICFG substring-alloca-2.i [2022-11-25 23:53:31,287 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 23:53:31,287 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 19 error locations. [2022-11-25 23:53:31,343 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 23:53:31,356 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3f51351a, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 23:53:31,357 INFO L358 AbstractCegarLoop]: Starting to check reachability of 19 error locations. [2022-11-25 23:53:31,362 INFO L276 IsEmpty]: Start isEmpty. Operand has 39 states, 19 states have (on average 2.4210526315789473) internal successors, (46), 38 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:31,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-25 23:53:31,371 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:31,372 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-25 23:53:31,373 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:31,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:31,383 INFO L85 PathProgramCache]: Analyzing trace with hash 158342, now seen corresponding path program 1 times [2022-11-25 23:53:31,395 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:31,396 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1789747401] [2022-11-25 23:53:31,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:31,397 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:31,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:31,962 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:31,962 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:31,963 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1789747401] [2022-11-25 23:53:31,964 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1789747401] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:31,964 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:31,964 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-25 23:53:31,966 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [383433980] [2022-11-25 23:53:31,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:31,972 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 23:53:31,972 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:32,029 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 23:53:32,032 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:53:32,034 INFO L87 Difference]: Start difference. First operand has 39 states, 19 states have (on average 2.4210526315789473) internal successors, (46), 38 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:32,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:32,155 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-11-25 23:53:32,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:53:32,160 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-25 23:53:32,160 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:32,167 INFO L225 Difference]: With dead ends: 37 [2022-11-25 23:53:32,167 INFO L226 Difference]: Without dead ends: 36 [2022-11-25 23:53:32,169 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:53:32,176 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:32,177 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 19 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:53:32,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-25 23:53:32,208 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-25 23:53:32,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:32,213 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-25 23:53:32,214 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 3 [2022-11-25 23:53:32,215 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:32,215 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-25 23:53:32,215 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:32,216 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-25 23:53:32,217 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-25 23:53:32,217 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:32,217 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-25 23:53:32,217 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 23:53:32,218 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:32,219 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:32,219 INFO L85 PathProgramCache]: Analyzing trace with hash 158343, now seen corresponding path program 1 times [2022-11-25 23:53:32,219 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:32,220 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [847859126] [2022-11-25 23:53:32,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:32,220 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:32,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:32,608 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:32,608 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:32,609 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [847859126] [2022-11-25 23:53:32,609 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [847859126] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:32,609 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:32,610 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:53:32,610 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1572869570] [2022-11-25 23:53:32,610 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:32,612 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:53:32,612 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:32,613 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:53:32,613 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:53:32,614 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:32,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:32,769 INFO L93 Difference]: Finished difference Result 70 states and 80 transitions. [2022-11-25 23:53:32,769 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:53:32,770 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-25 23:53:32,770 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:32,771 INFO L225 Difference]: With dead ends: 70 [2022-11-25 23:53:32,771 INFO L226 Difference]: Without dead ends: 70 [2022-11-25 23:53:32,772 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:53:32,773 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 38 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:32,774 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 58 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:53:32,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-25 23:53:32,779 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 38. [2022-11-25 23:53:32,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 21 states have (on average 2.0952380952380953) internal successors, (44), 37 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:32,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 44 transitions. [2022-11-25 23:53:32,781 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 44 transitions. Word has length 3 [2022-11-25 23:53:32,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:32,782 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 44 transitions. [2022-11-25 23:53:32,782 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:32,783 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 44 transitions. [2022-11-25 23:53:32,783 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-25 23:53:32,783 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:32,784 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-25 23:53:32,784 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 23:53:32,784 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:32,785 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:32,785 INFO L85 PathProgramCache]: Analyzing trace with hash 5013776, now seen corresponding path program 1 times [2022-11-25 23:53:32,785 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:32,786 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1178127241] [2022-11-25 23:53:32,786 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:32,786 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:32,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:33,077 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:33,077 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:33,077 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1178127241] [2022-11-25 23:53:33,078 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1178127241] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:33,078 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:33,078 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:53:33,078 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1025782937] [2022-11-25 23:53:33,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:33,079 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:53:33,079 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:33,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:53:33,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:53:33,081 INFO L87 Difference]: Start difference. First operand 38 states and 44 transitions. Second operand has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:33,129 INFO L93 Difference]: Finished difference Result 37 states and 43 transitions. [2022-11-25 23:53:33,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:53:33,129 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-25 23:53:33,130 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:33,130 INFO L225 Difference]: With dead ends: 37 [2022-11-25 23:53:33,130 INFO L226 Difference]: Without dead ends: 37 [2022-11-25 23:53:33,131 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:53:33,132 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:33,133 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 19 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:53:33,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-25 23:53:33,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 37. [2022-11-25 23:53:33,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-25 23:53:33,137 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 4 [2022-11-25 23:53:33,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:33,138 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-25 23:53:33,138 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,138 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-25 23:53:33,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-25 23:53:33,139 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:33,139 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-25 23:53:33,139 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 23:53:33,139 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:33,140 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:33,140 INFO L85 PathProgramCache]: Analyzing trace with hash 5011007, now seen corresponding path program 1 times [2022-11-25 23:53:33,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:33,141 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [62421628] [2022-11-25 23:53:33,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:33,141 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:33,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:33,193 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:33,193 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:33,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [62421628] [2022-11-25 23:53:33,194 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [62421628] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:33,194 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:33,194 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-25 23:53:33,195 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1070584773] [2022-11-25 23:53:33,195 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:33,195 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 23:53:33,195 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:33,196 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 23:53:33,196 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:53:33,196 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:33,234 INFO L93 Difference]: Finished difference Result 35 states and 41 transitions. [2022-11-25 23:53:33,235 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:53:33,235 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-25 23:53:33,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:33,236 INFO L225 Difference]: With dead ends: 35 [2022-11-25 23:53:33,236 INFO L226 Difference]: Without dead ends: 35 [2022-11-25 23:53:33,236 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:53:33,237 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 33 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:33,238 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 18 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:53:33,238 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-11-25 23:53:33,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 35. [2022-11-25 23:53:33,241 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-11-25 23:53:33,242 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 4 [2022-11-25 23:53:33,242 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:33,242 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-11-25 23:53:33,242 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,242 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-11-25 23:53:33,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-25 23:53:33,243 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:33,243 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-25 23:53:33,243 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 23:53:33,243 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:33,244 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:33,244 INFO L85 PathProgramCache]: Analyzing trace with hash 5011008, now seen corresponding path program 1 times [2022-11-25 23:53:33,244 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:33,244 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [406879378] [2022-11-25 23:53:33,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:33,245 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:33,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:33,417 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:33,417 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:33,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [406879378] [2022-11-25 23:53:33,418 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [406879378] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:33,418 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:33,418 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:53:33,419 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1929602490] [2022-11-25 23:53:33,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:33,420 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:53:33,421 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:33,422 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:53:33,423 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:53:33,423 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:33,554 INFO L93 Difference]: Finished difference Result 63 states and 73 transitions. [2022-11-25 23:53:33,555 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:53:33,555 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-25 23:53:33,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:33,556 INFO L225 Difference]: With dead ends: 63 [2022-11-25 23:53:33,556 INFO L226 Difference]: Without dead ends: 63 [2022-11-25 23:53:33,557 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-25 23:53:33,558 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 99 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:33,559 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 51 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:53:33,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-11-25 23:53:33,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 37. [2022-11-25 23:53:33,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 23 states have (on average 1.9130434782608696) internal successors, (44), 36 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 44 transitions. [2022-11-25 23:53:33,563 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 44 transitions. Word has length 4 [2022-11-25 23:53:33,563 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:33,566 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 44 transitions. [2022-11-25 23:53:33,566 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,566 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 44 transitions. [2022-11-25 23:53:33,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 23:53:33,567 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:33,567 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-25 23:53:33,567 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 23:53:33,568 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:33,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:33,568 INFO L85 PathProgramCache]: Analyzing trace with hash 155427050, now seen corresponding path program 1 times [2022-11-25 23:53:33,569 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:33,569 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1321913022] [2022-11-25 23:53:33,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:33,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:33,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:33,848 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:33,848 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:33,849 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1321913022] [2022-11-25 23:53:33,849 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1321913022] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:33,849 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:33,849 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:53:33,849 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1410604878] [2022-11-25 23:53:33,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:33,850 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:53:33,850 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:33,850 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:53:33,851 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:53:33,851 INFO L87 Difference]: Start difference. First operand 37 states and 44 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:33,894 INFO L93 Difference]: Finished difference Result 36 states and 43 transitions. [2022-11-25 23:53:33,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:53:33,895 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 23:53:33,895 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:33,897 INFO L225 Difference]: With dead ends: 36 [2022-11-25 23:53:33,897 INFO L226 Difference]: Without dead ends: 36 [2022-11-25 23:53:33,897 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:53:33,899 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 67 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:33,902 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 17 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:53:33,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-25 23:53:33,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-25 23:53:33,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 23 states have (on average 1.8695652173913044) internal successors, (43), 35 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 43 transitions. [2022-11-25 23:53:33,915 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 43 transitions. Word has length 5 [2022-11-25 23:53:33,915 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:33,915 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 43 transitions. [2022-11-25 23:53:33,915 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:33,916 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 43 transitions. [2022-11-25 23:53:33,916 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 23:53:33,916 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:33,916 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1] [2022-11-25 23:53:33,916 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-25 23:53:33,917 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:33,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:33,917 INFO L85 PathProgramCache]: Analyzing trace with hash 152263501, now seen corresponding path program 1 times [2022-11-25 23:53:33,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:33,918 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [10073268] [2022-11-25 23:53:33,918 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:33,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:33,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:34,220 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:34,220 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:34,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [10073268] [2022-11-25 23:53:34,220 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [10073268] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:53:34,221 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [173898353] [2022-11-25 23:53:34,221 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:34,221 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:34,221 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:34,230 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:53:34,242 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 23:53:34,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:34,308 INFO L263 TraceCheckSpWp]: Trace formula consists of 67 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-25 23:53:34,314 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:53:34,426 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:34,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-25 23:53:34,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:53:34,681 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:34,681 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:53:34,838 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:34,838 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [173898353] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:53:34,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [930299666] [2022-11-25 23:53:34,858 INFO L159 IcfgInterpreter]: Started Sifa with 4 locations of interest [2022-11-25 23:53:34,858 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:53:34,863 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:53:34,869 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:53:34,870 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:53:34,935 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:34,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:53:35,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:53:35,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:35,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:35,244 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:53:35,678 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '602#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |#NULL.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:53:35,679 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:53:35,679 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:53:35,679 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [3, 3, 3] total 9 [2022-11-25 23:53:35,679 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1210455012] [2022-11-25 23:53:35,680 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:53:35,680 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-25 23:53:35,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:35,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-25 23:53:35,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-11-25 23:53:35,681 INFO L87 Difference]: Start difference. First operand 36 states and 43 transitions. Second operand has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:36,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:36,121 INFO L93 Difference]: Finished difference Result 96 states and 114 transitions. [2022-11-25 23:53:36,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 23:53:36,122 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 23:53:36,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:36,123 INFO L225 Difference]: With dead ends: 96 [2022-11-25 23:53:36,123 INFO L226 Difference]: Without dead ends: 96 [2022-11-25 23:53:36,123 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=70, Invalid=202, Unknown=0, NotChecked=0, Total=272 [2022-11-25 23:53:36,124 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 200 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 229 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 200 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 231 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 229 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:36,124 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [200 Valid, 221 Invalid, 231 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 229 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 23:53:36,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2022-11-25 23:53:36,127 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 33. [2022-11-25 23:53:36,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 21 states have (on average 1.8571428571428572) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:36,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-11-25 23:53:36,128 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 5 [2022-11-25 23:53:36,129 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:36,129 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-11-25 23:53:36,129 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:36,129 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-11-25 23:53:36,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-25 23:53:36,130 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:36,130 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-25 23:53:36,142 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-25 23:53:36,331 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-11-25 23:53:36,331 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:36,332 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:36,332 INFO L85 PathProgramCache]: Analyzing trace with hash 523273240, now seen corresponding path program 1 times [2022-11-25 23:53:36,332 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:36,332 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1590933649] [2022-11-25 23:53:36,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:36,333 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:36,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:36,430 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:36,431 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:36,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1590933649] [2022-11-25 23:53:36,431 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1590933649] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:36,431 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:36,432 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:53:36,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1343127792] [2022-11-25 23:53:36,432 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:36,434 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:53:36,434 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:36,435 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:53:36,435 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:53:36,436 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:36,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:36,509 INFO L93 Difference]: Finished difference Result 55 states and 64 transitions. [2022-11-25 23:53:36,510 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:53:36,510 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-25 23:53:36,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:36,511 INFO L225 Difference]: With dead ends: 55 [2022-11-25 23:53:36,511 INFO L226 Difference]: Without dead ends: 55 [2022-11-25 23:53:36,511 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-25 23:53:36,512 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 83 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:36,513 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 30 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:53:36,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-25 23:53:36,515 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 34. [2022-11-25 23:53:36,515 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 33 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:36,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 41 transitions. [2022-11-25 23:53:36,516 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 41 transitions. Word has length 6 [2022-11-25 23:53:36,516 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:36,516 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 41 transitions. [2022-11-25 23:53:36,517 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:36,517 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 41 transitions. [2022-11-25 23:53:36,517 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-25 23:53:36,517 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:36,518 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-25 23:53:36,518 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-25 23:53:36,518 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:36,519 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:36,519 INFO L85 PathProgramCache]: Analyzing trace with hash 523273239, now seen corresponding path program 1 times [2022-11-25 23:53:36,519 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:36,519 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [368181825] [2022-11-25 23:53:36,519 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:36,520 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:36,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:36,590 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:36,590 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:36,590 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [368181825] [2022-11-25 23:53:36,590 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [368181825] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:36,590 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:36,590 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:53:36,591 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [691036882] [2022-11-25 23:53:36,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:36,591 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:53:36,591 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:36,592 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:53:36,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:53:36,592 INFO L87 Difference]: Start difference. First operand 34 states and 41 transitions. Second operand has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:36,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:36,636 INFO L93 Difference]: Finished difference Result 33 states and 39 transitions. [2022-11-25 23:53:36,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:53:36,637 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-25 23:53:36,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:36,638 INFO L225 Difference]: With dead ends: 33 [2022-11-25 23:53:36,638 INFO L226 Difference]: Without dead ends: 33 [2022-11-25 23:53:36,638 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:53:36,640 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 53 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:36,641 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 18 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:53:36,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-11-25 23:53:36,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 33. [2022-11-25 23:53:36,646 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:36,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-11-25 23:53:36,648 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 6 [2022-11-25 23:53:36,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:36,648 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-11-25 23:53:36,648 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:36,648 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-11-25 23:53:36,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-25 23:53:36,649 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:36,649 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-25 23:53:36,649 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-25 23:53:36,649 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:36,650 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:36,650 INFO L85 PathProgramCache]: Analyzing trace with hash 520684782, now seen corresponding path program 1 times [2022-11-25 23:53:36,650 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:36,650 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [495577190] [2022-11-25 23:53:36,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:36,651 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:36,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:36,899 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:36,899 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:36,899 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [495577190] [2022-11-25 23:53:36,899 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [495577190] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:53:36,899 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [804309649] [2022-11-25 23:53:36,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:36,900 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:36,900 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:36,901 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:53:36,930 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-25 23:53:36,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:36,984 INFO L263 TraceCheckSpWp]: Trace formula consists of 70 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-25 23:53:36,986 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:53:37,060 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-25 23:53:37,060 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-25 23:53:37,266 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:37,266 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:53:37,429 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:37,429 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [804309649] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:53:37,429 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1131615934] [2022-11-25 23:53:37,431 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-25 23:53:37,432 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:53:37,432 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:53:37,432 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:53:37,432 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:53:37,461 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:37,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:53:37,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:53:37,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:37,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:37,703 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:53:38,317 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '952#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet18#1|)) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_main_#t~nondet18#1| 127) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:53:38,317 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:53:38,317 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:53:38,317 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2022-11-25 23:53:38,318 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [872811327] [2022-11-25 23:53:38,318 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:53:38,318 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-25 23:53:38,318 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:38,319 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-25 23:53:38,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=238, Unknown=0, NotChecked=0, Total=306 [2022-11-25 23:53:38,319 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:38,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:38,657 INFO L93 Difference]: Finished difference Result 83 states and 96 transitions. [2022-11-25 23:53:38,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 23:53:38,658 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-25 23:53:38,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:38,658 INFO L225 Difference]: With dead ends: 83 [2022-11-25 23:53:38,659 INFO L226 Difference]: Without dead ends: 83 [2022-11-25 23:53:38,659 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=103, Invalid=317, Unknown=0, NotChecked=0, Total=420 [2022-11-25 23:53:38,660 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 257 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 257 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 178 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:38,660 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [257 Valid, 172 Invalid, 178 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:53:38,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-11-25 23:53:38,662 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 30. [2022-11-25 23:53:38,662 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 20 states have (on average 1.75) internal successors, (35), 29 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:38,662 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 35 transitions. [2022-11-25 23:53:38,663 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 35 transitions. Word has length 6 [2022-11-25 23:53:38,663 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:38,663 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 35 transitions. [2022-11-25 23:53:38,663 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:38,663 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 35 transitions. [2022-11-25 23:53:38,663 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-25 23:53:38,664 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:38,664 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:38,674 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-25 23:53:38,864 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-25 23:53:38,864 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:38,865 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:38,865 INFO L85 PathProgramCache]: Analyzing trace with hash 354410300, now seen corresponding path program 1 times [2022-11-25 23:53:38,865 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:38,865 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [643373355] [2022-11-25 23:53:38,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:38,866 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:38,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:38,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:38,918 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:38,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [643373355] [2022-11-25 23:53:38,918 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [643373355] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:38,919 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:38,919 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:53:38,919 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [554347293] [2022-11-25 23:53:38,919 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:38,919 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:53:38,919 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:38,920 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:53:38,920 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:53:38,920 INFO L87 Difference]: Start difference. First operand 30 states and 35 transitions. Second operand has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:38,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:38,976 INFO L93 Difference]: Finished difference Result 30 states and 36 transitions. [2022-11-25 23:53:38,977 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:53:38,977 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-25 23:53:38,977 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:38,978 INFO L225 Difference]: With dead ends: 30 [2022-11-25 23:53:38,978 INFO L226 Difference]: Without dead ends: 30 [2022-11-25 23:53:38,978 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:53:38,979 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 37 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 21 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:38,979 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 21 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:53:38,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2022-11-25 23:53:38,980 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 27. [2022-11-25 23:53:38,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 20 states have (on average 1.6) internal successors, (32), 26 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:38,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 32 transitions. [2022-11-25 23:53:38,981 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 32 transitions. Word has length 8 [2022-11-25 23:53:38,981 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:38,981 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 32 transitions. [2022-11-25 23:53:38,982 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:38,982 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 32 transitions. [2022-11-25 23:53:38,982 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-25 23:53:38,982 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:38,982 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:38,982 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-25 23:53:38,983 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:38,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:38,999 INFO L85 PathProgramCache]: Analyzing trace with hash 354410301, now seen corresponding path program 1 times [2022-11-25 23:53:38,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:38,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1649068643] [2022-11-25 23:53:38,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:39,000 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:39,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:39,113 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:39,113 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:39,113 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1649068643] [2022-11-25 23:53:39,113 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1649068643] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:39,114 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:39,114 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:53:39,114 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1639118728] [2022-11-25 23:53:39,114 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:39,114 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:53:39,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:39,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:53:39,115 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:53:39,115 INFO L87 Difference]: Start difference. First operand 27 states and 32 transitions. Second operand has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:39,187 INFO L93 Difference]: Finished difference Result 43 states and 51 transitions. [2022-11-25 23:53:39,187 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:53:39,187 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-25 23:53:39,188 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:39,188 INFO L225 Difference]: With dead ends: 43 [2022-11-25 23:53:39,188 INFO L226 Difference]: Without dead ends: 43 [2022-11-25 23:53:39,188 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 23:53:39,189 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 91 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 31 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:39,189 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 31 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:53:39,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-25 23:53:39,190 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 33. [2022-11-25 23:53:39,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 26 states have (on average 1.6153846153846154) internal successors, (42), 32 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 42 transitions. [2022-11-25 23:53:39,191 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 42 transitions. Word has length 8 [2022-11-25 23:53:39,191 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:39,191 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 42 transitions. [2022-11-25 23:53:39,192 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,192 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 42 transitions. [2022-11-25 23:53:39,192 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-25 23:53:39,192 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:39,192 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:39,192 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-25 23:53:39,193 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:39,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:39,193 INFO L85 PathProgramCache]: Analyzing trace with hash 1285859555, now seen corresponding path program 1 times [2022-11-25 23:53:39,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:39,193 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2140028059] [2022-11-25 23:53:39,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:39,194 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:39,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:39,304 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:39,304 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:39,305 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2140028059] [2022-11-25 23:53:39,305 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2140028059] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:39,305 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:39,305 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:53:39,305 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [47386246] [2022-11-25 23:53:39,305 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:39,306 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:53:39,306 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:39,306 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:53:39,306 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:53:39,306 INFO L87 Difference]: Start difference. First operand 33 states and 42 transitions. Second operand has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,338 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:39,339 INFO L93 Difference]: Finished difference Result 32 states and 41 transitions. [2022-11-25 23:53:39,339 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:53:39,339 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-25 23:53:39,339 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:39,340 INFO L225 Difference]: With dead ends: 32 [2022-11-25 23:53:39,340 INFO L226 Difference]: Without dead ends: 29 [2022-11-25 23:53:39,340 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:53:39,341 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 21 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:39,341 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 32 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:53:39,341 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-25 23:53:39,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-25 23:53:39,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 23 states have (on average 1.608695652173913) internal successors, (37), 28 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 37 transitions. [2022-11-25 23:53:39,343 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 37 transitions. Word has length 10 [2022-11-25 23:53:39,343 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:39,343 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 37 transitions. [2022-11-25 23:53:39,343 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,343 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 37 transitions. [2022-11-25 23:53:39,344 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-25 23:53:39,344 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:39,344 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:39,344 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-11-25 23:53:39,344 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr14REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:39,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:39,345 INFO L85 PathProgramCache]: Analyzing trace with hash 1209053803, now seen corresponding path program 1 times [2022-11-25 23:53:39,345 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:39,345 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1853970966] [2022-11-25 23:53:39,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:39,345 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:39,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:39,385 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:39,385 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:39,385 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1853970966] [2022-11-25 23:53:39,385 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1853970966] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:39,386 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:39,386 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:53:39,388 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1994154253] [2022-11-25 23:53:39,388 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:39,388 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:53:39,388 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:39,389 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:53:39,389 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:53:39,389 INFO L87 Difference]: Start difference. First operand 29 states and 37 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:39,427 INFO L93 Difference]: Finished difference Result 29 states and 36 transitions. [2022-11-25 23:53:39,427 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:53:39,427 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-25 23:53:39,427 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:39,428 INFO L225 Difference]: With dead ends: 29 [2022-11-25 23:53:39,428 INFO L226 Difference]: Without dead ends: 29 [2022-11-25 23:53:39,428 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:53:39,429 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 25 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:39,429 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 14 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:53:39,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-25 23:53:39,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 28. [2022-11-25 23:53:39,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 23 states have (on average 1.5217391304347827) internal successors, (35), 27 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 35 transitions. [2022-11-25 23:53:39,433 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 35 transitions. Word has length 11 [2022-11-25 23:53:39,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:39,433 INFO L495 AbstractCegarLoop]: Abstraction has 28 states and 35 transitions. [2022-11-25 23:53:39,434 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,434 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 35 transitions. [2022-11-25 23:53:39,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-25 23:53:39,435 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:39,435 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:39,435 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-25 23:53:39,435 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:39,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:39,436 INFO L85 PathProgramCache]: Analyzing trace with hash 1209053804, now seen corresponding path program 1 times [2022-11-25 23:53:39,436 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:39,436 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1920227704] [2022-11-25 23:53:39,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:39,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:39,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:39,580 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:39,580 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:39,580 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1920227704] [2022-11-25 23:53:39,580 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1920227704] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:39,581 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:39,581 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 23:53:39,581 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [910067744] [2022-11-25 23:53:39,581 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:39,581 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 23:53:39,581 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:39,582 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 23:53:39,582 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-25 23:53:39,582 INFO L87 Difference]: Start difference. First operand 28 states and 35 transitions. Second operand has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:39,698 INFO L93 Difference]: Finished difference Result 50 states and 61 transitions. [2022-11-25 23:53:39,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 23:53:39,699 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-25 23:53:39,699 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:39,700 INFO L225 Difference]: With dead ends: 50 [2022-11-25 23:53:39,700 INFO L226 Difference]: Without dead ends: 50 [2022-11-25 23:53:39,700 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2022-11-25 23:53:39,701 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 78 mSDsluCounter, 11 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:39,701 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 17 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:53:39,702 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-25 23:53:39,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 33. [2022-11-25 23:53:39,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 28 states have (on average 1.4642857142857142) internal successors, (41), 32 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 41 transitions. [2022-11-25 23:53:39,703 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 41 transitions. Word has length 11 [2022-11-25 23:53:39,704 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:39,704 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 41 transitions. [2022-11-25 23:53:39,704 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,704 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 41 transitions. [2022-11-25 23:53:39,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-25 23:53:39,705 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:39,705 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:39,705 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-25 23:53:39,705 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:39,706 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:39,706 INFO L85 PathProgramCache]: Analyzing trace with hash 1209062877, now seen corresponding path program 1 times [2022-11-25 23:53:39,706 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:39,706 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1684348685] [2022-11-25 23:53:39,706 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:39,707 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:39,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:39,728 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:39,728 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:39,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1684348685] [2022-11-25 23:53:39,728 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1684348685] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:39,728 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:39,729 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 23:53:39,729 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1040925656] [2022-11-25 23:53:39,729 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:39,729 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 23:53:39,729 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:39,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 23:53:39,730 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:53:39,730 INFO L87 Difference]: Start difference. First operand 33 states and 41 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,748 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:39,748 INFO L93 Difference]: Finished difference Result 35 states and 43 transitions. [2022-11-25 23:53:39,749 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:53:39,749 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-25 23:53:39,749 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:39,749 INFO L225 Difference]: With dead ends: 35 [2022-11-25 23:53:39,750 INFO L226 Difference]: Without dead ends: 35 [2022-11-25 23:53:39,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:53:39,751 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 0 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:39,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 29 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:53:39,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-11-25 23:53:39,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 35. [2022-11-25 23:53:39,753 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 30 states have (on average 1.4333333333333333) internal successors, (43), 34 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 43 transitions. [2022-11-25 23:53:39,753 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 43 transitions. Word has length 11 [2022-11-25 23:53:39,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:39,754 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 43 transitions. [2022-11-25 23:53:39,754 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:39,754 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 43 transitions. [2022-11-25 23:53:39,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-25 23:53:39,754 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:39,755 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:39,755 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-11-25 23:53:39,755 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:39,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:39,756 INFO L85 PathProgramCache]: Analyzing trace with hash -2035392994, now seen corresponding path program 1 times [2022-11-25 23:53:39,756 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:39,756 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1496199174] [2022-11-25 23:53:39,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:39,756 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:39,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:40,103 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:40,103 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:40,103 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1496199174] [2022-11-25 23:53:40,103 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1496199174] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:40,103 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:40,104 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-25 23:53:40,104 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1443279795] [2022-11-25 23:53:40,104 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:40,105 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-25 23:53:40,105 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:40,106 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-25 23:53:40,106 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2022-11-25 23:53:40,106 INFO L87 Difference]: Start difference. First operand 35 states and 43 transitions. Second operand has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:40,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:40,505 INFO L93 Difference]: Finished difference Result 81 states and 97 transitions. [2022-11-25 23:53:40,505 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-25 23:53:40,506 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-25 23:53:40,506 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:40,506 INFO L225 Difference]: With dead ends: 81 [2022-11-25 23:53:40,506 INFO L226 Difference]: Without dead ends: 81 [2022-11-25 23:53:40,507 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=149, Invalid=313, Unknown=0, NotChecked=0, Total=462 [2022-11-25 23:53:40,507 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 126 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:40,508 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 84 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:53:40,508 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-11-25 23:53:40,509 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 46. [2022-11-25 23:53:40,509 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 41 states have (on average 1.3902439024390243) internal successors, (57), 45 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:40,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 57 transitions. [2022-11-25 23:53:40,510 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 57 transitions. Word has length 13 [2022-11-25 23:53:40,510 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:40,510 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 57 transitions. [2022-11-25 23:53:40,510 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:40,511 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 57 transitions. [2022-11-25 23:53:40,511 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-25 23:53:40,511 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:40,511 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:40,511 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-11-25 23:53:40,512 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:40,512 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:40,512 INFO L85 PathProgramCache]: Analyzing trace with hash -2026746548, now seen corresponding path program 1 times [2022-11-25 23:53:40,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:40,512 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1783149745] [2022-11-25 23:53:40,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:40,513 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:40,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:40,565 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:40,565 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:40,565 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1783149745] [2022-11-25 23:53:40,565 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1783149745] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:40,566 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:40,566 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 23:53:40,566 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [560629980] [2022-11-25 23:53:40,566 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:40,566 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 23:53:40,566 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:40,567 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 23:53:40,567 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:53:40,567 INFO L87 Difference]: Start difference. First operand 46 states and 57 transitions. Second operand has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:40,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:40,615 INFO L93 Difference]: Finished difference Result 51 states and 61 transitions. [2022-11-25 23:53:40,615 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 23:53:40,616 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-25 23:53:40,616 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:40,616 INFO L225 Difference]: With dead ends: 51 [2022-11-25 23:53:40,616 INFO L226 Difference]: Without dead ends: 48 [2022-11-25 23:53:40,616 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-25 23:53:40,617 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 8 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:40,617 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 26 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:53:40,618 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2022-11-25 23:53:40,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 47. [2022-11-25 23:53:40,619 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 42 states have (on average 1.3095238095238095) internal successors, (55), 46 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:40,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 55 transitions. [2022-11-25 23:53:40,619 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 55 transitions. Word has length 13 [2022-11-25 23:53:40,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:40,620 INFO L495 AbstractCegarLoop]: Abstraction has 47 states and 55 transitions. [2022-11-25 23:53:40,620 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:40,620 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 55 transitions. [2022-11-25 23:53:40,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-25 23:53:40,620 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:40,620 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:40,620 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-11-25 23:53:40,621 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:40,621 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:40,621 INFO L85 PathProgramCache]: Analyzing trace with hash -1802581683, now seen corresponding path program 1 times [2022-11-25 23:53:40,621 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:40,621 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1155811311] [2022-11-25 23:53:40,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:40,622 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:40,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:40,861 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:53:40,861 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:40,861 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1155811311] [2022-11-25 23:53:40,861 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1155811311] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:40,861 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:40,861 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 23:53:40,862 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2014526252] [2022-11-25 23:53:40,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:40,862 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-25 23:53:40,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:40,862 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-25 23:53:40,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-11-25 23:53:40,863 INFO L87 Difference]: Start difference. First operand 47 states and 55 transitions. Second operand has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:40,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:40,968 INFO L93 Difference]: Finished difference Result 43 states and 50 transitions. [2022-11-25 23:53:40,969 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 23:53:40,969 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-25 23:53:40,969 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:40,969 INFO L225 Difference]: With dead ends: 43 [2022-11-25 23:53:40,969 INFO L226 Difference]: Without dead ends: 37 [2022-11-25 23:53:40,970 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-25 23:53:40,970 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 8 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:40,970 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 78 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:53:40,971 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-25 23:53:40,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 36. [2022-11-25 23:53:40,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 31 states have (on average 1.3548387096774193) internal successors, (42), 35 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:40,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 42 transitions. [2022-11-25 23:53:40,972 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 42 transitions. Word has length 15 [2022-11-25 23:53:40,972 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:40,972 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 42 transitions. [2022-11-25 23:53:40,972 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:40,973 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 42 transitions. [2022-11-25 23:53:40,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-25 23:53:40,973 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:40,973 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:40,973 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-11-25 23:53:40,973 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:40,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:40,974 INFO L85 PathProgramCache]: Analyzing trace with hash 204836708, now seen corresponding path program 1 times [2022-11-25 23:53:40,974 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:40,974 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1371197374] [2022-11-25 23:53:40,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:40,974 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:40,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:41,204 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:41,205 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:41,205 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1371197374] [2022-11-25 23:53:41,205 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1371197374] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:53:41,205 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:53:41,205 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-25 23:53:41,205 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [508721699] [2022-11-25 23:53:41,205 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:53:41,206 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-25 23:53:41,206 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:41,206 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-25 23:53:41,206 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-11-25 23:53:41,207 INFO L87 Difference]: Start difference. First operand 36 states and 42 transitions. Second operand has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:41,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:41,341 INFO L93 Difference]: Finished difference Result 44 states and 50 transitions. [2022-11-25 23:53:41,341 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-25 23:53:41,341 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-25 23:53:41,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:41,342 INFO L225 Difference]: With dead ends: 44 [2022-11-25 23:53:41,342 INFO L226 Difference]: Without dead ends: 38 [2022-11-25 23:53:41,342 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-25 23:53:41,343 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 35 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:41,343 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 74 Invalid, 81 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:53:41,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-25 23:53:41,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 37. [2022-11-25 23:53:41,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 32 states have (on average 1.34375) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:41,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-25 23:53:41,345 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 15 [2022-11-25 23:53:41,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:41,345 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-25 23:53:41,345 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:41,346 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-25 23:53:41,346 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-25 23:53:41,346 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:41,346 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:41,346 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-11-25 23:53:41,347 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:41,347 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:41,347 INFO L85 PathProgramCache]: Analyzing trace with hash 1117547254, now seen corresponding path program 1 times [2022-11-25 23:53:41,347 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:41,347 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [981573230] [2022-11-25 23:53:41,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:41,348 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:41,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:41,652 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:41,652 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:41,653 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [981573230] [2022-11-25 23:53:41,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [981573230] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:53:41,653 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [409905213] [2022-11-25 23:53:41,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:41,653 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:41,653 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:41,655 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:53:41,663 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-25 23:53:41,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:41,760 INFO L263 TraceCheckSpWp]: Trace formula consists of 162 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-25 23:53:41,762 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:53:41,878 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:41,879 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:53:41,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:53:42,023 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:42,023 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [409905213] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:53:42,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1241007438] [2022-11-25 23:53:42,025 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:53:42,026 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:53:42,026 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:53:42,026 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:53:42,026 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:53:42,061 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:42,062 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:53:42,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:42,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:42,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:42,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:53:42,335 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:42,372 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:42,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:42,509 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:53:42,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:53:42,952 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:53:46,502 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2087#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:53:46,502 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:53:46,502 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:53:46,502 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 17 [2022-11-25 23:53:46,502 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1776580402] [2022-11-25 23:53:46,503 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:53:46,503 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-25 23:53:46,503 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:46,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-25 23:53:46,504 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=140, Invalid=852, Unknown=0, NotChecked=0, Total=992 [2022-11-25 23:53:46,504 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:46,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:46,782 INFO L93 Difference]: Finished difference Result 54 states and 59 transitions. [2022-11-25 23:53:46,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-25 23:53:46,785 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-25 23:53:46,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:46,786 INFO L225 Difference]: With dead ends: 54 [2022-11-25 23:53:46,786 INFO L226 Difference]: Without dead ends: 50 [2022-11-25 23:53:46,787 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 24 SyntacticMatches, 2 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 433 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=201, Invalid=1131, Unknown=0, NotChecked=0, Total=1332 [2022-11-25 23:53:46,787 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 226 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 35 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:46,788 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [226 Valid, 35 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:53:46,788 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-25 23:53:46,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 33. [2022-11-25 23:53:46,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 30 states have (on average 1.2666666666666666) internal successors, (38), 32 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:46,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 38 transitions. [2022-11-25 23:53:46,794 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 38 transitions. Word has length 17 [2022-11-25 23:53:46,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:46,794 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 38 transitions. [2022-11-25 23:53:46,795 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:46,795 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 38 transitions. [2022-11-25 23:53:46,795 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-25 23:53:46,795 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:46,795 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:46,806 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-25 23:53:46,996 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:46,996 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:46,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:46,997 INFO L85 PathProgramCache]: Analyzing trace with hash 221052965, now seen corresponding path program 1 times [2022-11-25 23:53:46,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:46,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2064793385] [2022-11-25 23:53:46,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:46,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:47,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:47,261 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:47,262 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:47,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2064793385] [2022-11-25 23:53:47,262 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2064793385] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:53:47,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [460890863] [2022-11-25 23:53:47,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:47,263 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:47,263 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:47,264 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:53:47,274 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-25 23:53:47,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:47,375 INFO L263 TraceCheckSpWp]: Trace formula consists of 165 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-25 23:53:47,376 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:53:47,486 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:47,486 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:53:47,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:53:47,635 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:47,635 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [460890863] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:53:47,635 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [837183542] [2022-11-25 23:53:47,643 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:53:47,643 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:53:47,644 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:53:47,644 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:53:47,645 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:53:47,715 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:47,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:53:47,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:53:47,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:47,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:47,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:53:48,035 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-25 23:53:48,036 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-25 23:53:48,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:48,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:48,241 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-25 23:53:48,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 177 treesize of output 181 [2022-11-25 23:53:48,506 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-25 23:53:48,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 328 treesize of output 343 [2022-11-25 23:53:50,676 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:53:54,728 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2323#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:53:54,729 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:53:54,729 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:53:54,729 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 15 [2022-11-25 23:53:54,729 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1315175669] [2022-11-25 23:53:54,730 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:53:54,730 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-25 23:53:54,730 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:53:54,731 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-25 23:53:54,731 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=146, Invalid=910, Unknown=0, NotChecked=0, Total=1056 [2022-11-25 23:53:54,731 INFO L87 Difference]: Start difference. First operand 33 states and 38 transitions. Second operand has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:54,969 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:53:54,970 INFO L93 Difference]: Finished difference Result 62 states and 72 transitions. [2022-11-25 23:53:54,970 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-25 23:53:54,971 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-25 23:53:54,971 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:53:54,971 INFO L225 Difference]: With dead ends: 62 [2022-11-25 23:53:54,971 INFO L226 Difference]: Without dead ends: 62 [2022-11-25 23:53:54,972 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 28 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 416 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=202, Invalid=1204, Unknown=0, NotChecked=0, Total=1406 [2022-11-25 23:53:54,973 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 279 mSDsluCounter, 31 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 279 SdHoareTripleChecker+Valid, 38 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:53:54,973 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [279 Valid, 38 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:53:54,974 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-25 23:53:54,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 43. [2022-11-25 23:53:54,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 40 states have (on average 1.3) internal successors, (52), 42 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:54,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 52 transitions. [2022-11-25 23:53:54,975 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 52 transitions. Word has length 19 [2022-11-25 23:53:54,975 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:53:54,975 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 52 transitions. [2022-11-25 23:53:54,976 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:53:54,976 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 52 transitions. [2022-11-25 23:53:54,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-25 23:53:54,976 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:53:54,976 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:53:54,992 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-25 23:53:55,192 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:55,192 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:53:55,192 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:53:55,192 INFO L85 PathProgramCache]: Analyzing trace with hash -1734844397, now seen corresponding path program 1 times [2022-11-25 23:53:55,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:53:55,193 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [606318131] [2022-11-25 23:53:55,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:55,193 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:53:55,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:55,444 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:55,444 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:53:55,444 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [606318131] [2022-11-25 23:53:55,445 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [606318131] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:53:55,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [571946511] [2022-11-25 23:53:55,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:53:55,445 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:53:55,445 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:53:55,447 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:53:55,452 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-25 23:53:55,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:53:55,556 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 23 conjunts are in the unsatisfiable core [2022-11-25 23:53:55,558 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:53:55,673 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:55,674 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:53:55,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:53:55,855 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:53:55,855 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [571946511] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:53:55,856 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [908419084] [2022-11-25 23:53:55,859 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:53:55,859 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:53:55,860 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:53:55,860 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:53:55,860 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:53:55,890 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:53:55,891 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:53:55,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:53:55,996 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:56,040 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:56,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:53:56,162 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-25 23:53:56,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-25 23:53:56,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:56,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:53:56,350 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-25 23:53:56,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 177 treesize of output 181 [2022-11-25 23:53:56,545 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-25 23:53:56,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 328 treesize of output 343 [2022-11-25 23:53:57,895 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:01,477 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2588#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:01,477 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:01,477 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:01,477 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 18 [2022-11-25 23:54:01,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1515977569] [2022-11-25 23:54:01,477 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:01,478 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-25 23:54:01,478 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:01,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-25 23:54:01,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=139, Invalid=983, Unknown=0, NotChecked=0, Total=1122 [2022-11-25 23:54:01,479 INFO L87 Difference]: Start difference. First operand 43 states and 52 transitions. Second operand has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:01,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:01,886 INFO L93 Difference]: Finished difference Result 58 states and 66 transitions. [2022-11-25 23:54:01,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-25 23:54:01,886 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-25 23:54:01,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:01,887 INFO L225 Difference]: With dead ends: 58 [2022-11-25 23:54:01,887 INFO L226 Difference]: Without dead ends: 58 [2022-11-25 23:54:01,888 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 31 SyntacticMatches, 2 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 499 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=266, Invalid=1540, Unknown=0, NotChecked=0, Total=1806 [2022-11-25 23:54:01,888 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 212 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 268 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:01,889 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 46 Invalid, 268 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:54:01,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-11-25 23:54:01,890 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 46. [2022-11-25 23:54:01,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 43 states have (on average 1.2790697674418605) internal successors, (55), 45 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:01,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 55 transitions. [2022-11-25 23:54:01,891 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 55 transitions. Word has length 20 [2022-11-25 23:54:01,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:01,891 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 55 transitions. [2022-11-25 23:54:01,891 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:01,891 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 55 transitions. [2022-11-25 23:54:01,892 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-25 23:54:01,892 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:01,892 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:01,903 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:02,092 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-25 23:54:02,093 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:54:02,093 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:02,093 INFO L85 PathProgramCache]: Analyzing trace with hash -738116091, now seen corresponding path program 2 times [2022-11-25 23:54:02,093 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:02,093 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1649830401] [2022-11-25 23:54:02,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:02,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:02,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:02,506 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:02,506 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:02,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1649830401] [2022-11-25 23:54:02,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1649830401] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:02,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [579087739] [2022-11-25 23:54:02,507 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:54:02,507 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:02,507 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:02,508 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:02,530 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-25 23:54:02,711 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 23:54:02,711 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:54:02,735 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-25 23:54:02,738 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:02,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:54:02,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:02,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 23:54:03,327 INFO L321 Elim1Store]: treesize reduction 24, result has 35.1 percent of original size [2022-11-25 23:54:03,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 48 treesize of output 33 [2022-11-25 23:54:03,355 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:03,356 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:03,740 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:03,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 64 treesize of output 42 [2022-11-25 23:54:03,764 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:03,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 111 treesize of output 116 [2022-11-25 23:54:03,781 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:54:03,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 64 [2022-11-25 23:54:04,254 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:04,254 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [579087739] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:04,254 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1965349673] [2022-11-25 23:54:04,257 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:54:04,257 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:04,257 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:04,258 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:04,258 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:04,286 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:04,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:04,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:04,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:04,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:04,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:04,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:04,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:04,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:04,649 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:04,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:04,925 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:07,881 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2882#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:07,881 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:07,881 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:07,881 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 13] total 31 [2022-11-25 23:54:07,881 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [332991628] [2022-11-25 23:54:07,881 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:07,882 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-25 23:54:07,882 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:07,882 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-25 23:54:07,883 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=179, Invalid=1876, Unknown=15, NotChecked=0, Total=2070 [2022-11-25 23:54:07,884 INFO L87 Difference]: Start difference. First operand 46 states and 55 transitions. Second operand has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:10,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:10,815 INFO L93 Difference]: Finished difference Result 153 states and 170 transitions. [2022-11-25 23:54:10,815 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-11-25 23:54:10,815 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-25 23:54:10,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:10,816 INFO L225 Difference]: With dead ends: 153 [2022-11-25 23:54:10,817 INFO L226 Difference]: Without dead ends: 145 [2022-11-25 23:54:10,818 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 29 SyntacticMatches, 2 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 1641 ImplicationChecksByTransitivity, 6.2s TimeCoverageRelationStatistics Valid=805, Invalid=5342, Unknown=15, NotChecked=0, Total=6162 [2022-11-25 23:54:10,819 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 489 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 504 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 489 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 509 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 504 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:10,821 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [489 Valid, 106 Invalid, 509 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 504 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-25 23:54:10,822 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 145 states. [2022-11-25 23:54:10,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 145 to 90. [2022-11-25 23:54:10,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 87 states have (on average 1.2183908045977012) internal successors, (106), 89 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:10,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 106 transitions. [2022-11-25 23:54:10,825 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 106 transitions. Word has length 22 [2022-11-25 23:54:10,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:10,825 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 106 transitions. [2022-11-25 23:54:10,826 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:10,826 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 106 transitions. [2022-11-25 23:54:10,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-25 23:54:10,832 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:10,832 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:10,843 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:11,038 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:11,038 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:54:11,039 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:11,039 INFO L85 PathProgramCache]: Analyzing trace with hash 1722857087, now seen corresponding path program 1 times [2022-11-25 23:54:11,039 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:11,039 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1103125396] [2022-11-25 23:54:11,039 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:11,039 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:11,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:11,264 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:11,265 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:11,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1103125396] [2022-11-25 23:54:11,265 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1103125396] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:11,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [946114495] [2022-11-25 23:54:11,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:11,265 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:11,266 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:11,267 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:11,286 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-25 23:54:11,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:11,370 INFO L263 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-25 23:54:11,371 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:11,420 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-25 23:54:11,420 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:11,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 6 [2022-11-25 23:54:11,499 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-25 23:54:11,499 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [946114495] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:11,499 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2145169316] [2022-11-25 23:54:11,502 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:54:11,502 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:11,502 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:11,503 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:11,503 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:11,548 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:11,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:11,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:11,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:11,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:11,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:11,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-25 23:54:11,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:11,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:11,932 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:11,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:12,329 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:15,840 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [2145169316] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:54:15,840 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:15,840 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [7, 5, 5] total 28 [2022-11-25 23:54:15,841 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [623404572] [2022-11-25 23:54:15,841 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:54:15,841 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-25 23:54:15,842 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:15,842 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-25 23:54:15,842 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=664, Unknown=0, NotChecked=0, Total=812 [2022-11-25 23:54:15,843 INFO L87 Difference]: Start difference. First operand 90 states and 106 transitions. Second operand has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:19,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:19,304 INFO L93 Difference]: Finished difference Result 94 states and 108 transitions. [2022-11-25 23:54:19,304 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-25 23:54:19,304 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-25 23:54:19,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:19,305 INFO L225 Difference]: With dead ends: 94 [2022-11-25 23:54:19,305 INFO L226 Difference]: Without dead ends: 94 [2022-11-25 23:54:19,306 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 49 SyntacticMatches, 1 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 226 ImplicationChecksByTransitivity, 6.8s TimeCoverageRelationStatistics Valid=280, Invalid=1126, Unknown=0, NotChecked=0, Total=1406 [2022-11-25 23:54:19,307 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 78 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 178 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 2 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 178 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:19,307 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 2 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 178 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 23:54:19,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-25 23:54:19,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 90. [2022-11-25 23:54:19,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 87 states have (on average 1.1954022988505748) internal successors, (104), 89 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:19,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 104 transitions. [2022-11-25 23:54:19,310 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 104 transitions. Word has length 24 [2022-11-25 23:54:19,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:19,310 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 104 transitions. [2022-11-25 23:54:19,311 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:19,311 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 104 transitions. [2022-11-25 23:54:19,315 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-25 23:54:19,315 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:19,316 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:19,326 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:19,521 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-11-25 23:54:19,522 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:54:19,522 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:19,522 INFO L85 PathProgramCache]: Analyzing trace with hash 1241317677, now seen corresponding path program 3 times [2022-11-25 23:54:19,522 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:19,522 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [745710679] [2022-11-25 23:54:19,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:19,523 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:19,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:19,826 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:19,826 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:19,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [745710679] [2022-11-25 23:54:19,827 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [745710679] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:19,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [931298335] [2022-11-25 23:54:19,827 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:54:19,827 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:19,827 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:19,828 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:19,832 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-25 23:54:19,980 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:54:19,980 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:54:19,982 INFO L263 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 26 conjunts are in the unsatisfiable core [2022-11-25 23:54:19,984 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:19,997 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:54:19,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 23:54:20,125 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:20,125 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:20,358 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:20,358 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [931298335] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:20,358 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1569412310] [2022-11-25 23:54:20,360 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:54:20,360 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:20,360 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:20,360 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:20,361 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:20,389 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:20,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:20,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:20,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:20,505 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:20,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:20,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-25 23:54:20,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:20,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:20,721 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:20,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:20,979 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:23,701 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3748#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:23,702 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:23,702 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:23,702 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 23 [2022-11-25 23:54:23,702 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1067574040] [2022-11-25 23:54:23,702 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:23,702 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-25 23:54:23,703 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:23,703 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-25 23:54:23,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=1216, Unknown=0, NotChecked=0, Total=1406 [2022-11-25 23:54:23,703 INFO L87 Difference]: Start difference. First operand 90 states and 104 transitions. Second operand has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:24,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:24,076 INFO L93 Difference]: Finished difference Result 132 states and 150 transitions. [2022-11-25 23:54:24,076 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-25 23:54:24,077 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-11-25 23:54:24,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:24,079 INFO L225 Difference]: With dead ends: 132 [2022-11-25 23:54:24,079 INFO L226 Difference]: Without dead ends: 132 [2022-11-25 23:54:24,079 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 540 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=309, Invalid=1671, Unknown=0, NotChecked=0, Total=1980 [2022-11-25 23:54:24,080 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 190 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 410 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 412 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 410 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:24,080 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [190 Valid, 113 Invalid, 412 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 410 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:54:24,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2022-11-25 23:54:24,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 97. [2022-11-25 23:54:24,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 94 states have (on average 1.2127659574468086) internal successors, (114), 96 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:24,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 114 transitions. [2022-11-25 23:54:24,086 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 114 transitions. Word has length 26 [2022-11-25 23:54:24,087 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:24,087 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 114 transitions. [2022-11-25 23:54:24,088 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:24,088 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 114 transitions. [2022-11-25 23:54:24,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-25 23:54:24,088 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:24,089 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:24,102 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:24,302 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-11-25 23:54:24,302 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:54:24,303 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:24,303 INFO L85 PathProgramCache]: Analyzing trace with hash -1667724320, now seen corresponding path program 2 times [2022-11-25 23:54:24,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:24,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2077851535] [2022-11-25 23:54:24,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:24,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:24,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:24,767 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:24,767 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:24,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2077851535] [2022-11-25 23:54:24,767 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2077851535] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:24,768 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [434593574] [2022-11-25 23:54:24,768 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:54:24,768 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:24,768 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:24,769 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:24,798 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-25 23:54:24,906 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 23:54:24,907 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:54:24,909 INFO L263 TraceCheckSpWp]: Trace formula consists of 213 conjuncts, 32 conjunts are in the unsatisfiable core [2022-11-25 23:54:24,911 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:24,992 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:25,062 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:25,062 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:25,218 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-25 23:54:25,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-25 23:54:25,235 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:25,235 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:25,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-25 23:54:25,457 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:25,457 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [434593574] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:25,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1498552885] [2022-11-25 23:54:25,459 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:54:25,459 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:25,459 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:25,459 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:25,460 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:25,488 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:25,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:25,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:25,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:25,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:25,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:25,730 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-25 23:54:25,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-25 23:54:25,779 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:25,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:25,845 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:25,845 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:26,492 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:29,980 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4190#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:29,980 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:29,980 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:29,980 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 22 [2022-11-25 23:54:29,980 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1562282921] [2022-11-25 23:54:29,981 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:29,983 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-25 23:54:29,983 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:29,983 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-25 23:54:29,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=1325, Unknown=0, NotChecked=0, Total=1482 [2022-11-25 23:54:29,984 INFO L87 Difference]: Start difference. First operand 97 states and 114 transitions. Second operand has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:30,318 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:30,318 INFO L93 Difference]: Finished difference Result 115 states and 130 transitions. [2022-11-25 23:54:30,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-25 23:54:30,319 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-25 23:54:30,319 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:30,319 INFO L225 Difference]: With dead ends: 115 [2022-11-25 23:54:30,319 INFO L226 Difference]: Without dead ends: 79 [2022-11-25 23:54:30,320 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 53 SyntacticMatches, 2 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 658 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=239, Invalid=1741, Unknown=0, NotChecked=0, Total=1980 [2022-11-25 23:54:30,321 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 84 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 161 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 161 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:30,321 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 92 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 161 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:54:30,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-11-25 23:54:30,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 78. [2022-11-25 23:54:30,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 75 states have (on average 1.2133333333333334) internal successors, (91), 77 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:30,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 91 transitions. [2022-11-25 23:54:30,324 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 91 transitions. Word has length 28 [2022-11-25 23:54:30,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:30,325 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 91 transitions. [2022-11-25 23:54:30,325 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:30,325 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 91 transitions. [2022-11-25 23:54:30,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-25 23:54:30,326 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:30,326 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:30,334 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:30,532 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-25 23:54:30,532 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:54:30,533 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:30,533 INFO L85 PathProgramCache]: Analyzing trace with hash 427887228, now seen corresponding path program 2 times [2022-11-25 23:54:30,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:30,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [910646232] [2022-11-25 23:54:30,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:30,533 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:30,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:30,815 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 17 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:30,815 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:30,815 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [910646232] [2022-11-25 23:54:30,815 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [910646232] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:30,815 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2081906796] [2022-11-25 23:54:30,816 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:54:30,816 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:30,817 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:30,818 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:30,845 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-25 23:54:31,048 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 23:54:31,049 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:54:31,051 INFO L263 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-25 23:54:31,054 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:31,246 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:31,247 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:31,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-25 23:54:31,488 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:31,489 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2081906796] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:31,489 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [684628414] [2022-11-25 23:54:31,490 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:54:31,491 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:31,491 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:31,491 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:31,491 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:31,516 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:31,517 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:31,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:31,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:31,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:31,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:31,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-25 23:54:31,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:31,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:31,869 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:31,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:32,086 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:34,892 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4604#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:34,892 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:34,892 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:34,892 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 23 [2022-11-25 23:54:34,893 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1013473257] [2022-11-25 23:54:34,893 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:34,893 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-25 23:54:34,893 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:34,894 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-25 23:54:34,894 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=1313, Unknown=0, NotChecked=0, Total=1482 [2022-11-25 23:54:34,895 INFO L87 Difference]: Start difference. First operand 78 states and 91 transitions. Second operand has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:35,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:35,377 INFO L93 Difference]: Finished difference Result 97 states and 109 transitions. [2022-11-25 23:54:35,378 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-25 23:54:35,378 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-25 23:54:35,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:35,379 INFO L225 Difference]: With dead ends: 97 [2022-11-25 23:54:35,379 INFO L226 Difference]: Without dead ends: 97 [2022-11-25 23:54:35,379 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 53 SyntacticMatches, 3 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 629 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=365, Invalid=2085, Unknown=0, NotChecked=0, Total=2450 [2022-11-25 23:54:35,379 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 298 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 324 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 298 SdHoareTripleChecker+Valid, 57 SdHoareTripleChecker+Invalid, 326 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 324 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:35,380 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [298 Valid, 57 Invalid, 326 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 324 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:54:35,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-11-25 23:54:35,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 81. [2022-11-25 23:54:35,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 78 states have (on average 1.205128205128205) internal successors, (94), 80 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:35,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 94 transitions. [2022-11-25 23:54:35,382 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 94 transitions. Word has length 29 [2022-11-25 23:54:35,382 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:35,382 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 94 transitions. [2022-11-25 23:54:35,383 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:35,383 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 94 transitions. [2022-11-25 23:54:35,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-25 23:54:35,383 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:35,383 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:35,395 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:35,584 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-25 23:54:35,584 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:54:35,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:35,584 INFO L85 PathProgramCache]: Analyzing trace with hash 294381018, now seen corresponding path program 3 times [2022-11-25 23:54:35,584 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:35,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1090403191] [2022-11-25 23:54:35,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:35,585 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:35,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:35,849 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:35,849 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:35,850 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1090403191] [2022-11-25 23:54:35,850 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1090403191] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:35,850 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1128138440] [2022-11-25 23:54:35,850 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:54:35,850 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:35,850 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:35,851 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:35,882 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-25 23:54:35,999 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:54:35,999 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:54:36,002 INFO L263 TraceCheckSpWp]: Trace formula consists of 226 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-25 23:54:36,003 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:36,151 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:36,151 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:36,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:54:36,354 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:54:36,354 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1128138440] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:36,354 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1498012877] [2022-11-25 23:54:36,356 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:54:36,356 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:36,356 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:36,356 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:36,356 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:36,385 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:36,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:36,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:36,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:36,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:36,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:36,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-25 23:54:36,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:36,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:36,710 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:36,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:37,026 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:40,684 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5012#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:40,685 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:40,685 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:40,685 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 18 [2022-11-25 23:54:40,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [881022097] [2022-11-25 23:54:40,685 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:40,685 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-25 23:54:40,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:40,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-25 23:54:40,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=166, Invalid=1094, Unknown=0, NotChecked=0, Total=1260 [2022-11-25 23:54:40,687 INFO L87 Difference]: Start difference. First operand 81 states and 94 transitions. Second operand has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:40,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:40,996 INFO L93 Difference]: Finished difference Result 143 states and 162 transitions. [2022-11-25 23:54:40,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-25 23:54:40,997 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-11-25 23:54:40,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:40,998 INFO L225 Difference]: With dead ends: 143 [2022-11-25 23:54:40,998 INFO L226 Difference]: Without dead ends: 143 [2022-11-25 23:54:40,998 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 58 SyntacticMatches, 3 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 446 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=248, Invalid=1474, Unknown=0, NotChecked=0, Total=1722 [2022-11-25 23:54:40,999 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 242 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 317 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 319 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 317 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:40,999 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [242 Valid, 69 Invalid, 319 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 317 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:54:41,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2022-11-25 23:54:41,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 110. [2022-11-25 23:54:41,002 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 107 states have (on average 1.205607476635514) internal successors, (129), 109 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:41,003 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 129 transitions. [2022-11-25 23:54:41,003 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 129 transitions. Word has length 30 [2022-11-25 23:54:41,003 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:41,003 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 129 transitions. [2022-11-25 23:54:41,003 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:41,003 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 129 transitions. [2022-11-25 23:54:41,004 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-25 23:54:41,004 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:41,004 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:41,011 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-11-25 23:54:41,211 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-25 23:54:41,211 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:54:41,211 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:41,211 INFO L85 PathProgramCache]: Analyzing trace with hash -1117195730, now seen corresponding path program 4 times [2022-11-25 23:54:41,212 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:41,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [303775518] [2022-11-25 23:54:41,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:41,212 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:41,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:41,923 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 3 proven. 19 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:41,923 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:41,924 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [303775518] [2022-11-25 23:54:41,924 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [303775518] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:41,924 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [789980529] [2022-11-25 23:54:41,924 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:54:41,924 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:41,924 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:41,927 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:41,958 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-25 23:54:42,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:42,078 INFO L263 TraceCheckSpWp]: Trace formula consists of 248 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-25 23:54:42,080 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:42,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:42,548 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-25 23:54:42,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-25 23:54:42,552 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:42,552 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:42,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-25 23:54:42,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 23:54:42,864 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:42,865 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [789980529] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:42,865 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [886214122] [2022-11-25 23:54:42,866 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:54:42,867 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:42,868 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:42,868 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:42,868 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:42,913 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:42,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:42,952 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:42,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:43,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:43,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:43,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-25 23:54:43,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:43,238 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:43,291 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:43,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:43,592 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:47,873 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5504#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:47,873 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:47,873 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:47,873 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 12, 12] total 31 [2022-11-25 23:54:47,873 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [923805665] [2022-11-25 23:54:47,874 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:47,874 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-25 23:54:47,874 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:47,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-25 23:54:47,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=145, Invalid=1835, Unknown=0, NotChecked=0, Total=1980 [2022-11-25 23:54:47,876 INFO L87 Difference]: Start difference. First operand 110 states and 129 transitions. Second operand has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:51,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:51,138 INFO L93 Difference]: Finished difference Result 359 states and 402 transitions. [2022-11-25 23:54:51,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2022-11-25 23:54:51,138 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-25 23:54:51,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:51,140 INFO L225 Difference]: With dead ends: 359 [2022-11-25 23:54:51,140 INFO L226 Difference]: Without dead ends: 347 [2022-11-25 23:54:51,143 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 61 SyntacticMatches, 2 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 4 DeprecatedPredicates, 2043 ImplicationChecksByTransitivity, 7.3s TimeCoverageRelationStatistics Valid=770, Invalid=7062, Unknown=0, NotChecked=0, Total=7832 [2022-11-25 23:54:51,144 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 617 mSDsluCounter, 256 mSDsCounter, 0 mSdLazyCounter, 1129 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 617 SdHoareTripleChecker+Valid, 270 SdHoareTripleChecker+Invalid, 1136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 1129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:51,145 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [617 Valid, 270 Invalid, 1136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 1129 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-25 23:54:51,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 347 states. [2022-11-25 23:54:51,151 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 347 to 185. [2022-11-25 23:54:51,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 182 states have (on average 1.1923076923076923) internal successors, (217), 184 states have internal predecessors, (217), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:51,152 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 217 transitions. [2022-11-25 23:54:51,152 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 217 transitions. Word has length 31 [2022-11-25 23:54:51,152 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:51,152 INFO L495 AbstractCegarLoop]: Abstraction has 185 states and 217 transitions. [2022-11-25 23:54:51,153 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:51,153 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 217 transitions. [2022-11-25 23:54:51,154 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-25 23:54:51,154 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:51,154 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:51,171 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:51,367 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:51,367 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:54:51,368 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:51,368 INFO L85 PathProgramCache]: Analyzing trace with hash -1600115824, now seen corresponding path program 1 times [2022-11-25 23:54:51,368 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:51,368 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1243044613] [2022-11-25 23:54:51,368 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:51,368 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:51,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:51,665 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 0 proven. 19 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:51,666 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:51,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1243044613] [2022-11-25 23:54:51,666 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1243044613] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:51,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1049425380] [2022-11-25 23:54:51,666 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:51,666 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:51,667 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:51,668 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:51,693 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-25 23:54:51,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:51,802 INFO L263 TraceCheckSpWp]: Trace formula consists of 250 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-25 23:54:51,804 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:51,969 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 1 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:51,969 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:52,170 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:54:52,212 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 1 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:54:52,212 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1049425380] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:52,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1297823212] [2022-11-25 23:54:52,214 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:54:52,214 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:52,214 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:52,215 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:52,215 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:52,252 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:52,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:52,296 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:52,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:52,386 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:52,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:52,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-25 23:54:52,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:52,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:52,604 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:52,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:53,297 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:54:56,385 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6364#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:54:56,385 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:54:56,386 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:54:56,386 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 20 [2022-11-25 23:54:56,386 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1834287170] [2022-11-25 23:54:56,386 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:54:56,386 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-25 23:54:56,387 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:54:56,387 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-25 23:54:56,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=1238, Unknown=0, NotChecked=0, Total=1406 [2022-11-25 23:54:56,388 INFO L87 Difference]: Start difference. First operand 185 states and 217 transitions. Second operand has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:56,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:54:56,968 INFO L93 Difference]: Finished difference Result 211 states and 237 transitions. [2022-11-25 23:54:56,968 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-25 23:54:56,968 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-25 23:54:56,969 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:54:56,969 INFO L225 Difference]: With dead ends: 211 [2022-11-25 23:54:56,970 INFO L226 Difference]: Without dead ends: 211 [2022-11-25 23:54:56,971 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 66 SyntacticMatches, 3 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 637 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=384, Invalid=2166, Unknown=0, NotChecked=0, Total=2550 [2022-11-25 23:54:56,971 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 422 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 295 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 422 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 299 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 295 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:54:56,971 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [422 Valid, 49 Invalid, 299 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 295 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:54:56,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2022-11-25 23:54:56,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 185. [2022-11-25 23:54:56,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 182 states have (on average 1.1813186813186813) internal successors, (215), 184 states have internal predecessors, (215), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:56,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 215 transitions. [2022-11-25 23:54:56,976 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 215 transitions. Word has length 33 [2022-11-25 23:54:56,977 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:54:56,977 INFO L495 AbstractCegarLoop]: Abstraction has 185 states and 215 transitions. [2022-11-25 23:54:56,977 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:54:56,977 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 215 transitions. [2022-11-25 23:54:56,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-25 23:54:56,978 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:54:56,978 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:54:56,997 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-25 23:54:57,178 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:57,179 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:54:57,179 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:54:57,179 INFO L85 PathProgramCache]: Analyzing trace with hash 1925889798, now seen corresponding path program 5 times [2022-11-25 23:54:57,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:54:57,180 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1558521287] [2022-11-25 23:54:57,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:54:57,180 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:54:57,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:54:57,687 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:54:57,687 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:54:57,687 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1558521287] [2022-11-25 23:54:57,687 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1558521287] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:54:57,687 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1985927689] [2022-11-25 23:54:57,687 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:54:57,687 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:54:57,688 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:54:57,691 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:54:57,714 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-25 23:54:57,853 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-25 23:54:57,853 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:54:57,856 INFO L263 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-25 23:54:57,857 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:54:58,066 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:54:58,067 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:54:58,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-25 23:54:58,357 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:54:58,357 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1985927689] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:54:58,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [637529979] [2022-11-25 23:54:58,359 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:54:58,359 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:54:58,359 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:54:58,359 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:54:58,360 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:54:58,396 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:54:58,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:54:58,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:58,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:58,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:58,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:54:58,570 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:58,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:54:58,631 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:54:58,631 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:54:59,057 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:01,527 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7034#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:55:01,528 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:01,528 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:01,528 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 27 [2022-11-25 23:55:01,528 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1991435556] [2022-11-25 23:55:01,528 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:01,528 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-25 23:55:01,529 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:01,531 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-25 23:55:01,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1525, Unknown=0, NotChecked=0, Total=1722 [2022-11-25 23:55:01,532 INFO L87 Difference]: Start difference. First operand 185 states and 215 transitions. Second operand has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:02,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:55:02,231 INFO L93 Difference]: Finished difference Result 263 states and 298 transitions. [2022-11-25 23:55:02,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-25 23:55:02,231 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-25 23:55:02,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:55:02,232 INFO L225 Difference]: With dead ends: 263 [2022-11-25 23:55:02,233 INFO L226 Difference]: Without dead ends: 263 [2022-11-25 23:55:02,233 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 69 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 850 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=357, Invalid=2193, Unknown=0, NotChecked=0, Total=2550 [2022-11-25 23:55:02,234 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 290 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 684 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 685 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 684 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:55:02,234 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 171 Invalid, 685 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 684 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 23:55:02,235 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 263 states. [2022-11-25 23:55:02,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 263 to 197. [2022-11-25 23:55:02,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 194 states have (on average 1.1958762886597938) internal successors, (232), 196 states have internal predecessors, (232), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:02,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 232 transitions. [2022-11-25 23:55:02,241 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 232 transitions. Word has length 35 [2022-11-25 23:55:02,242 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:55:02,242 INFO L495 AbstractCegarLoop]: Abstraction has 197 states and 232 transitions. [2022-11-25 23:55:02,242 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:02,242 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 232 transitions. [2022-11-25 23:55:02,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-25 23:55:02,243 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:55:02,243 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:55:02,258 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-11-25 23:55:02,449 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-11-25 23:55:02,450 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:55:02,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:55:02,450 INFO L85 PathProgramCache]: Analyzing trace with hash 2011222531, now seen corresponding path program 3 times [2022-11-25 23:55:02,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:55:02,450 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [306021538] [2022-11-25 23:55:02,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:02,450 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:55:02,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:02,837 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 1 proven. 35 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:55:02,837 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:55:02,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [306021538] [2022-11-25 23:55:02,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [306021538] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:55:02,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1721888948] [2022-11-25 23:55:02,838 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:55:02,838 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:02,838 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:55:02,839 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:55:02,862 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-25 23:55:03,006 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:55:03,006 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:55:03,009 INFO L263 TraceCheckSpWp]: Trace formula consists of 288 conjuncts, 41 conjunts are in the unsatisfiable core [2022-11-25 23:55:03,011 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:55:03,134 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:03,474 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-25 23:55:03,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-25 23:55:03,505 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 6 proven. 30 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:55:03,505 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:55:03,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-25 23:55:03,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 23:55:03,835 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 6 proven. 30 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:55:03,836 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1721888948] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:03,836 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2008034983] [2022-11-25 23:55:03,837 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:55:03,837 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:03,837 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:03,838 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:03,838 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:03,860 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:03,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:03,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:55:03,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:03,978 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:04,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:04,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-25 23:55:04,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:04,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:04,191 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:55:04,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:55:04,443 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:07,601 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7779#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:55:07,601 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:07,601 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:07,601 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 14, 14] total 31 [2022-11-25 23:55:07,602 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [503533646] [2022-11-25 23:55:07,602 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:07,602 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-25 23:55:07,602 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:07,603 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-25 23:55:07,603 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=1832, Unknown=0, NotChecked=0, Total=1980 [2022-11-25 23:55:07,604 INFO L87 Difference]: Start difference. First operand 197 states and 232 transitions. Second operand has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:11,940 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:55:11,940 INFO L93 Difference]: Finished difference Result 550 states and 613 transitions. [2022-11-25 23:55:11,941 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-11-25 23:55:11,941 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-25 23:55:11,941 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:55:11,943 INFO L225 Difference]: With dead ends: 550 [2022-11-25 23:55:11,943 INFO L226 Difference]: Without dead ends: 540 [2022-11-25 23:55:11,946 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 78 SyntacticMatches, 2 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 5 DeprecatedPredicates, 2981 ImplicationChecksByTransitivity, 6.5s TimeCoverageRelationStatistics Valid=1085, Invalid=9835, Unknown=0, NotChecked=0, Total=10920 [2022-11-25 23:55:11,947 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 628 mSDsluCounter, 634 mSDsCounter, 0 mSdLazyCounter, 2539 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 628 SdHoareTripleChecker+Valid, 684 SdHoareTripleChecker+Invalid, 2542 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 2539 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-25 23:55:11,947 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [628 Valid, 684 Invalid, 2542 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 2539 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-11-25 23:55:11,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 540 states. [2022-11-25 23:55:11,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 540 to 264. [2022-11-25 23:55:11,957 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 261 states have (on average 1.1915708812260537) internal successors, (311), 263 states have internal predecessors, (311), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:11,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 311 transitions. [2022-11-25 23:55:11,958 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 311 transitions. Word has length 38 [2022-11-25 23:55:11,959 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:55:11,959 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 311 transitions. [2022-11-25 23:55:11,959 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:11,959 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 311 transitions. [2022-11-25 23:55:11,960 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-25 23:55:11,960 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:55:11,960 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:55:11,975 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-11-25 23:55:12,167 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-11-25 23:55:12,168 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:55:12,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:55:12,168 INFO L85 PathProgramCache]: Analyzing trace with hash 202916299, now seen corresponding path program 4 times [2022-11-25 23:55:12,168 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:55:12,168 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1398881476] [2022-11-25 23:55:12,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:12,169 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:55:12,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:13,704 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:55:13,704 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:55:13,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1398881476] [2022-11-25 23:55:13,704 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1398881476] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:55:13,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1426430267] [2022-11-25 23:55:13,705 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:55:13,705 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:13,705 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:55:13,706 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:55:13,730 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-25 23:55:13,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:13,870 INFO L263 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-25 23:55:13,872 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:55:13,887 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:55:14,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:14,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-25 23:55:14,356 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:14,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 10 [2022-11-25 23:55:14,391 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:55:14,391 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:55:14,530 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:14,531 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 23:55:14,538 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:14,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 23:55:14,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-25 23:55:14,800 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:55:14,801 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1426430267] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:14,801 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [452317642] [2022-11-25 23:55:14,802 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:55:14,802 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:14,803 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:14,803 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:14,803 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:14,832 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:14,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:14,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:55:14,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:14,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:14,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:15,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-25 23:55:15,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:15,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:15,194 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:55:15,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:55:15,504 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:19,702 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8987#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:55:19,702 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:19,702 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:19,702 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 11] total 30 [2022-11-25 23:55:19,703 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1630001911] [2022-11-25 23:55:19,703 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:19,703 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-25 23:55:19,703 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:19,704 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-25 23:55:19,704 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=1991, Unknown=3, NotChecked=0, Total=2162 [2022-11-25 23:55:19,705 INFO L87 Difference]: Start difference. First operand 264 states and 311 transitions. Second operand has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:21,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:55:21,747 INFO L93 Difference]: Finished difference Result 392 states and 447 transitions. [2022-11-25 23:55:21,748 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-25 23:55:21,748 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-25 23:55:21,748 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:55:21,749 INFO L225 Difference]: With dead ends: 392 [2022-11-25 23:55:21,750 INFO L226 Difference]: Without dead ends: 329 [2022-11-25 23:55:21,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 147 GetRequests, 83 SyntacticMatches, 1 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1002 ImplicationChecksByTransitivity, 6.7s TimeCoverageRelationStatistics Valid=435, Invalid=3722, Unknown=3, NotChecked=0, Total=4160 [2022-11-25 23:55:21,751 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 338 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 611 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 338 SdHoareTripleChecker+Valid, 181 SdHoareTripleChecker+Invalid, 618 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 611 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 23:55:21,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [338 Valid, 181 Invalid, 618 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 611 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-25 23:55:21,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2022-11-25 23:55:21,757 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 326. [2022-11-25 23:55:21,757 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 326 states, 323 states have (on average 1.1640866873065014) internal successors, (376), 325 states have internal predecessors, (376), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:21,759 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 326 states to 326 states and 376 transitions. [2022-11-25 23:55:21,759 INFO L78 Accepts]: Start accepts. Automaton has 326 states and 376 transitions. Word has length 39 [2022-11-25 23:55:21,759 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:55:21,759 INFO L495 AbstractCegarLoop]: Abstraction has 326 states and 376 transitions. [2022-11-25 23:55:21,760 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:21,760 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 376 transitions. [2022-11-25 23:55:21,760 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-25 23:55:21,761 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:55:21,761 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:55:21,782 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-25 23:55:21,979 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:21,979 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:55:21,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:55:21,980 INFO L85 PathProgramCache]: Analyzing trace with hash 94811765, now seen corresponding path program 2 times [2022-11-25 23:55:21,980 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:55:21,980 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [273842196] [2022-11-25 23:55:21,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:21,980 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:55:22,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:22,883 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 12 proven. 30 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:55:22,884 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:55:22,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [273842196] [2022-11-25 23:55:22,884 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [273842196] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:55:22,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2050885544] [2022-11-25 23:55:22,884 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:55:22,884 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:22,884 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:55:22,887 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:55:22,917 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-25 23:55:23,073 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 23:55:23,074 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:55:23,077 INFO L263 TraceCheckSpWp]: Trace formula consists of 280 conjuncts, 67 conjunts are in the unsatisfiable core [2022-11-25 23:55:23,079 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:55:23,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:55:23,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:23,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-25 23:55:24,494 INFO L321 Elim1Store]: treesize reduction 53, result has 49.5 percent of original size [2022-11-25 23:55:24,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 66 treesize of output 79 [2022-11-25 23:55:24,535 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 12 proven. 21 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:55:24,535 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:55:25,142 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (|ULTIMATE.start_substring_~pt~0#1.offset| Int) (v_ArrVal_674 (Array Int Int))) (let ((.cse2 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_674))) (let ((.cse0 (select .cse2 |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (.cse1 (select (select .cse2 |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|))) (or (= (select .cse0 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (not (= (select .cse0 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) .cse1)) (= .cse1 0))))) is different from false [2022-11-25 23:55:25,153 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:25,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 54 [2022-11-25 23:55:25,184 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:25,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 136 treesize of output 156 [2022-11-25 23:55:25,207 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:25,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 79 treesize of output 81 [2022-11-25 23:55:25,770 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 17 proven. 16 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:55:25,770 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2050885544] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:25,770 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1150397038] [2022-11-25 23:55:25,772 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:55:25,772 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:25,772 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:25,773 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:25,773 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:25,806 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:25,812 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:25,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:25,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:25,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:26,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:26,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:26,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:26,135 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:55:26,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:55:27,385 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:31,042 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10040#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:55:31,042 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:31,042 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:31,042 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 48 [2022-11-25 23:55:31,042 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [403178840] [2022-11-25 23:55:31,042 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:31,043 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-25 23:55:31,043 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:31,043 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-25 23:55:31,044 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=298, Invalid=3737, Unknown=1, NotChecked=124, Total=4160 [2022-11-25 23:55:31,044 INFO L87 Difference]: Start difference. First operand 326 states and 376 transitions. Second operand has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:33,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:55:33,244 INFO L93 Difference]: Finished difference Result 312 states and 357 transitions. [2022-11-25 23:55:33,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-25 23:55:33,246 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-25 23:55:33,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:55:33,248 INFO L225 Difference]: With dead ends: 312 [2022-11-25 23:55:33,248 INFO L226 Difference]: Without dead ends: 237 [2022-11-25 23:55:33,249 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 72 SyntacticMatches, 1 SemanticMatches, 83 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1666 ImplicationChecksByTransitivity, 7.1s TimeCoverageRelationStatistics Valid=711, Invalid=6264, Unknown=1, NotChecked=164, Total=7140 [2022-11-25 23:55:33,249 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 222 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 737 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 222 SdHoareTripleChecker+Valid, 169 SdHoareTripleChecker+Invalid, 786 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 737 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 46 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-25 23:55:33,250 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [222 Valid, 169 Invalid, 786 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 737 Invalid, 0 Unknown, 46 Unchecked, 0.6s Time] [2022-11-25 23:55:33,250 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237 states. [2022-11-25 23:55:33,255 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237 to 236. [2022-11-25 23:55:33,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 233 states have (on average 1.184549356223176) internal successors, (276), 235 states have internal predecessors, (276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:33,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 276 transitions. [2022-11-25 23:55:33,256 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 276 transitions. Word has length 40 [2022-11-25 23:55:33,256 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:55:33,257 INFO L495 AbstractCegarLoop]: Abstraction has 236 states and 276 transitions. [2022-11-25 23:55:33,257 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:33,257 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 276 transitions. [2022-11-25 23:55:33,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-25 23:55:33,258 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:55:33,258 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:55:33,265 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-25 23:55:33,464 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-25 23:55:33,465 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:55:33,465 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:55:33,465 INFO L85 PathProgramCache]: Analyzing trace with hash 1463732113, now seen corresponding path program 5 times [2022-11-25 23:55:33,465 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:55:33,465 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [624593773] [2022-11-25 23:55:33,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:33,466 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:55:33,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:33,768 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 1 proven. 38 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:55:33,769 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:55:33,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [624593773] [2022-11-25 23:55:33,769 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [624593773] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:55:33,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [512507836] [2022-11-25 23:55:33,769 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:55:33,769 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:33,769 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:55:33,771 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:55:33,798 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-25 23:55:33,944 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-25 23:55:33,944 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:55:33,946 INFO L263 TraceCheckSpWp]: Trace formula consists of 287 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-25 23:55:33,948 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:55:34,199 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 35 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:55:34,199 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:55:34,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-25 23:55:34,568 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 35 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:55:34,568 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [512507836] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:34,568 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [773314172] [2022-11-25 23:55:34,569 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:55:34,570 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:34,570 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:34,570 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:34,570 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:34,597 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:34,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:34,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:55:34,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:34,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:34,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:34,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-25 23:55:34,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:34,903 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:34,958 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:55:34,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:55:35,320 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:39,215 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10913#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:55:39,215 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:39,215 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:39,215 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 11, 11] total 27 [2022-11-25 23:55:39,215 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1777754369] [2022-11-25 23:55:39,216 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:39,216 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-25 23:55:39,216 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:39,217 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-25 23:55:39,217 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=225, Invalid=1755, Unknown=0, NotChecked=0, Total=1980 [2022-11-25 23:55:39,217 INFO L87 Difference]: Start difference. First operand 236 states and 276 transitions. Second operand has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:39,732 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:55:39,732 INFO L93 Difference]: Finished difference Result 404 states and 464 transitions. [2022-11-25 23:55:39,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-25 23:55:39,733 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-25 23:55:39,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:55:39,734 INFO L225 Difference]: With dead ends: 404 [2022-11-25 23:55:39,734 INFO L226 Difference]: Without dead ends: 404 [2022-11-25 23:55:39,735 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 83 SyntacticMatches, 4 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 894 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=434, Invalid=2536, Unknown=0, NotChecked=0, Total=2970 [2022-11-25 23:55:39,736 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 640 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 401 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 640 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 404 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 401 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:55:39,736 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [640 Valid, 68 Invalid, 404 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 401 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 23:55:39,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 404 states. [2022-11-25 23:55:39,743 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 404 to 303. [2022-11-25 23:55:39,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 300 states have (on average 1.19) internal successors, (357), 302 states have internal predecessors, (357), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:39,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 357 transitions. [2022-11-25 23:55:39,745 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 357 transitions. Word has length 41 [2022-11-25 23:55:39,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:55:39,746 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 357 transitions. [2022-11-25 23:55:39,746 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:39,746 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 357 transitions. [2022-11-25 23:55:39,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-25 23:55:39,747 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:55:39,747 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:55:39,758 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-25 23:55:39,954 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-25 23:55:39,954 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:55:39,954 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:55:39,955 INFO L85 PathProgramCache]: Analyzing trace with hash 525396335, now seen corresponding path program 3 times [2022-11-25 23:55:39,955 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:55:39,955 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [462605110] [2022-11-25 23:55:39,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:39,955 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:55:39,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:40,329 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 1 proven. 37 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:55:40,330 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:55:40,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [462605110] [2022-11-25 23:55:40,330 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [462605110] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:55:40,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2135076360] [2022-11-25 23:55:40,330 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:55:40,330 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:40,330 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:55:40,332 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:55:40,360 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-25 23:55:40,512 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:55:40,512 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:55:40,515 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-25 23:55:40,517 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:55:40,729 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:55:40,730 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:55:40,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:55:41,030 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:55:41,031 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2135076360] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:41,031 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1520154828] [2022-11-25 23:55:41,032 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:55:41,032 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:41,033 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:41,033 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:41,033 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:41,052 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:41,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:41,090 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:41,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:41,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:41,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:55:41,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:41,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:41,304 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:55:41,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:55:42,554 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:45,226 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11928#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:55:45,227 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:45,227 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:45,227 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 24 [2022-11-25 23:55:45,227 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [421547092] [2022-11-25 23:55:45,227 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:45,228 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-25 23:55:45,228 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:45,228 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-25 23:55:45,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=185, Invalid=1537, Unknown=0, NotChecked=0, Total=1722 [2022-11-25 23:55:45,229 INFO L87 Difference]: Start difference. First operand 303 states and 357 transitions. Second operand has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:46,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:55:46,066 INFO L93 Difference]: Finished difference Result 351 states and 399 transitions. [2022-11-25 23:55:46,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-25 23:55:46,067 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-25 23:55:46,067 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:55:46,068 INFO L225 Difference]: With dead ends: 351 [2022-11-25 23:55:46,068 INFO L226 Difference]: Without dead ends: 351 [2022-11-25 23:55:46,069 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 90 SyntacticMatches, 4 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 900 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=522, Invalid=2900, Unknown=0, NotChecked=0, Total=3422 [2022-11-25 23:55:46,069 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 390 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 453 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 390 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 456 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 453 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:55:46,070 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [390 Valid, 71 Invalid, 456 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 453 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 23:55:46,070 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2022-11-25 23:55:46,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 303. [2022-11-25 23:55:46,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 300 states have (on average 1.1833333333333333) internal successors, (355), 302 states have internal predecessors, (355), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:46,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 355 transitions. [2022-11-25 23:55:46,085 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 355 transitions. Word has length 42 [2022-11-25 23:55:46,085 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:55:46,086 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 355 transitions. [2022-11-25 23:55:46,087 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:55:46,087 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 355 transitions. [2022-11-25 23:55:46,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-25 23:55:46,088 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:55:46,088 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:55:46,095 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-25 23:55:46,295 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-25 23:55:46,295 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:55:46,295 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:55:46,295 INFO L85 PathProgramCache]: Analyzing trace with hash -1182475613, now seen corresponding path program 6 times [2022-11-25 23:55:46,295 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:55:46,296 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [62195017] [2022-11-25 23:55:46,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:55:46,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:55:46,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:55:46,737 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 46 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:55:46,737 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:55:46,737 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [62195017] [2022-11-25 23:55:46,737 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [62195017] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:55:46,738 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1838957179] [2022-11-25 23:55:46,738 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:55:46,738 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:55:46,738 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:55:46,739 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:55:46,741 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-25 23:55:46,915 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:55:46,915 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:55:46,918 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 95 conjunts are in the unsatisfiable core [2022-11-25 23:55:46,921 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:55:47,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:47,328 INFO L321 Elim1Store]: treesize reduction 27, result has 25.0 percent of original size [2022-11-25 23:55:47,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 22 [2022-11-25 23:55:48,069 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:55:48,088 INFO L321 Elim1Store]: treesize reduction 40, result has 23.1 percent of original size [2022-11-25 23:55:48,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 56 treesize of output 35 [2022-11-25 23:55:48,122 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 54 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:55:48,122 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:55:48,678 INFO L321 Elim1Store]: treesize reduction 19, result has 53.7 percent of original size [2022-11-25 23:55:48,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 187 treesize of output 147 [2022-11-25 23:55:48,688 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:55:48,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 143 treesize of output 137 [2022-11-25 23:55:48,716 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-25 23:55:48,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 22 [2022-11-25 23:55:48,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 23:55:49,004 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 39 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:55:49,005 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1838957179] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:55:49,005 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [407212182] [2022-11-25 23:55:49,006 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:55:49,006 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:55:49,007 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:55:49,007 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:55:49,007 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:55:49,038 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:55:49,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:55:49,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:49,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:49,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:49,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:55:49,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:49,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:55:49,260 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:55:49,260 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:55:49,541 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:55:52,934 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12926#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:55:52,935 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:55:52,935 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:55:52,935 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 20, 17] total 47 [2022-11-25 23:55:52,935 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [488202516] [2022-11-25 23:55:52,935 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:55:52,936 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-25 23:55:52,936 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:55:52,936 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-25 23:55:52,937 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=3542, Unknown=0, NotChecked=0, Total=3782 [2022-11-25 23:55:52,937 INFO L87 Difference]: Start difference. First operand 303 states and 355 transitions. Second operand has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:00,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:56:00,491 INFO L93 Difference]: Finished difference Result 839 states and 949 transitions. [2022-11-25 23:56:00,492 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 66 states. [2022-11-25 23:56:00,492 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-25 23:56:00,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:56:00,495 INFO L225 Difference]: With dead ends: 839 [2022-11-25 23:56:00,495 INFO L226 Difference]: Without dead ends: 839 [2022-11-25 23:56:00,497 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 76 SyntacticMatches, 0 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3124 ImplicationChecksByTransitivity, 9.4s TimeCoverageRelationStatistics Valid=1374, Invalid=11966, Unknown=0, NotChecked=0, Total=13340 [2022-11-25 23:56:00,497 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 972 mSDsluCounter, 887 mSDsCounter, 0 mSdLazyCounter, 4300 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 972 SdHoareTripleChecker+Valid, 922 SdHoareTripleChecker+Invalid, 4309 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 4300 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-11-25 23:56:00,498 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [972 Valid, 922 Invalid, 4309 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 4300 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2022-11-25 23:56:00,499 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 839 states. [2022-11-25 23:56:00,510 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 839 to 355. [2022-11-25 23:56:00,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 352 states have (on average 1.1988636363636365) internal successors, (422), 354 states have internal predecessors, (422), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:00,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 422 transitions. [2022-11-25 23:56:00,512 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 422 transitions. Word has length 42 [2022-11-25 23:56:00,513 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:56:00,513 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 422 transitions. [2022-11-25 23:56:00,513 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:00,513 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 422 transitions. [2022-11-25 23:56:00,514 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-25 23:56:00,514 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:56:00,514 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:56:00,530 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-25 23:56:00,722 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-25 23:56:00,723 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:56:00,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:56:00,723 INFO L85 PathProgramCache]: Analyzing trace with hash -487556779, now seen corresponding path program 4 times [2022-11-25 23:56:00,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:56:00,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [63449651] [2022-11-25 23:56:00,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:56:00,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:56:00,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:01,105 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 1 proven. 43 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:56:01,105 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:56:01,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [63449651] [2022-11-25 23:56:01,105 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [63449651] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:56:01,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [841338811] [2022-11-25 23:56:01,105 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:56:01,105 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:01,105 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:56:01,107 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:56:01,130 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-25 23:56:01,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:01,282 INFO L263 TraceCheckSpWp]: Trace formula consists of 311 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-25 23:56:01,283 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:56:01,528 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:56:01,528 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:56:01,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:56:01,847 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:56:01,847 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [841338811] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:56:01,847 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [849955464] [2022-11-25 23:56:01,848 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:56:01,848 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:56:01,849 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:56:01,849 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:56:01,849 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:56:01,866 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:01,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:56:01,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:01,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:01,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:02,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:56:02,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:02,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:02,109 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:56:02,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:56:03,531 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:56:06,213 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14526#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:56:06,213 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:56:06,213 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:56:06,213 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 24 [2022-11-25 23:56:06,213 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2124324433] [2022-11-25 23:56:06,213 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:56:06,214 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-25 23:56:06,214 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:56:06,214 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-25 23:56:06,215 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=186, Invalid=1536, Unknown=0, NotChecked=0, Total=1722 [2022-11-25 23:56:06,215 INFO L87 Difference]: Start difference. First operand 355 states and 422 transitions. Second operand has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:07,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:56:07,026 INFO L93 Difference]: Finished difference Result 407 states and 465 transitions. [2022-11-25 23:56:07,027 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-25 23:56:07,027 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-11-25 23:56:07,027 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:56:07,029 INFO L225 Difference]: With dead ends: 407 [2022-11-25 23:56:07,029 INFO L226 Difference]: Without dead ends: 407 [2022-11-25 23:56:07,030 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 96 SyntacticMatches, 4 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 870 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=490, Invalid=2816, Unknown=0, NotChecked=0, Total=3306 [2022-11-25 23:56:07,030 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 668 mSDsluCounter, 90 mSDsCounter, 0 mSdLazyCounter, 603 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 668 SdHoareTripleChecker+Valid, 101 SdHoareTripleChecker+Invalid, 609 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 603 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:56:07,030 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [668 Valid, 101 Invalid, 609 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 603 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 23:56:07,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 407 states. [2022-11-25 23:56:07,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 407 to 355. [2022-11-25 23:56:07,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 352 states have (on average 1.1903409090909092) internal successors, (419), 354 states have internal predecessors, (419), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:07,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 419 transitions. [2022-11-25 23:56:07,041 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 419 transitions. Word has length 44 [2022-11-25 23:56:07,042 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:56:07,042 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 419 transitions. [2022-11-25 23:56:07,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:07,042 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 419 transitions. [2022-11-25 23:56:07,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-25 23:56:07,043 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:56:07,043 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:56:07,051 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-25 23:56:07,249 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-25 23:56:07,250 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:56:07,251 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:56:07,251 INFO L85 PathProgramCache]: Analyzing trace with hash 1760874124, now seen corresponding path program 4 times [2022-11-25 23:56:07,251 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:56:07,251 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [775608324] [2022-11-25 23:56:07,251 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:56:07,252 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:56:07,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:07,682 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 4 proven. 58 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:56:07,683 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:56:07,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [775608324] [2022-11-25 23:56:07,683 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [775608324] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:56:07,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1942184219] [2022-11-25 23:56:07,683 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:56:07,683 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:07,683 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:56:07,684 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:56:07,686 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-25 23:56:07,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:07,846 INFO L263 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 38 conjunts are in the unsatisfiable core [2022-11-25 23:56:07,848 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:56:08,101 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 9 proven. 53 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:56:08,101 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:56:08,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:56:08,475 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 9 proven. 53 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:56:08,475 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1942184219] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:56:08,475 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [977626523] [2022-11-25 23:56:08,477 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:56:08,477 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:56:08,477 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:56:08,478 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:56:08,478 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:56:08,498 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:08,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:56:08,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:56:08,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:08,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:08,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:56:08,693 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-25 23:56:08,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-25 23:56:08,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:08,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:08,794 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:56:08,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:56:09,080 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:56:11,721 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15643#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:56:11,721 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:56:11,721 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:56:11,722 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 29 [2022-11-25 23:56:11,722 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [213644978] [2022-11-25 23:56:11,722 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:56:11,722 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-25 23:56:11,722 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:56:11,722 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-25 23:56:11,723 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1783, Unknown=0, NotChecked=0, Total=1980 [2022-11-25 23:56:11,723 INFO L87 Difference]: Start difference. First operand 355 states and 419 transitions. Second operand has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:12,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:56:12,619 INFO L93 Difference]: Finished difference Result 666 states and 773 transitions. [2022-11-25 23:56:12,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-25 23:56:12,619 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-25 23:56:12,620 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:56:12,622 INFO L225 Difference]: With dead ends: 666 [2022-11-25 23:56:12,622 INFO L226 Difference]: Without dead ends: 666 [2022-11-25 23:56:12,623 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 103 SyntacticMatches, 5 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 968 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=549, Invalid=3111, Unknown=0, NotChecked=0, Total=3660 [2022-11-25 23:56:12,624 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 301 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 830 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 301 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 831 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 830 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 23:56:12,624 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [301 Valid, 190 Invalid, 831 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 830 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-25 23:56:12,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 666 states. [2022-11-25 23:56:12,632 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 666 to 358. [2022-11-25 23:56:12,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 358 states, 355 states have (on average 1.1887323943661972) internal successors, (422), 357 states have internal predecessors, (422), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:12,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 358 states to 358 states and 422 transitions. [2022-11-25 23:56:12,634 INFO L78 Accepts]: Start accepts. Automaton has 358 states and 422 transitions. Word has length 47 [2022-11-25 23:56:12,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:56:12,635 INFO L495 AbstractCegarLoop]: Abstraction has 358 states and 422 transitions. [2022-11-25 23:56:12,635 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:12,635 INFO L276 IsEmpty]: Start isEmpty. Operand 358 states and 422 transitions. [2022-11-25 23:56:12,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-25 23:56:12,636 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:56:12,636 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:56:12,646 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2022-11-25 23:56:12,843 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-25 23:56:12,843 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:56:12,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:56:12,843 INFO L85 PathProgramCache]: Analyzing trace with hash 298207322, now seen corresponding path program 5 times [2022-11-25 23:56:12,843 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:56:12,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1929947832] [2022-11-25 23:56:12,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:56:12,844 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:56:12,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:14,028 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 57 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:56:14,028 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:56:14,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1929947832] [2022-11-25 23:56:14,029 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1929947832] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:56:14,029 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [589841017] [2022-11-25 23:56:14,029 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:56:14,029 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:14,029 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:56:14,031 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:56:14,033 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-25 23:56:14,245 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-25 23:56:14,245 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:56:14,249 INFO L263 TraceCheckSpWp]: Trace formula consists of 336 conjuncts, 84 conjunts are in the unsatisfiable core [2022-11-25 23:56:14,252 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:56:14,262 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:56:14,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-25 23:56:14,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-25 23:56:14,954 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:14,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 21 [2022-11-25 23:56:14,989 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 41 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:56:14,989 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:56:15,403 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (v_ArrVal_939 (Array Int Int))) (let ((.cse0 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_939))) (let ((.cse1 (select (select .cse0 |ULTIMATE.start_substring_~pt~0#1.base|) (+ 2 |c_ULTIMATE.start_main_~nondetString2~0#1.offset|)))) (or (not (= (select (select .cse0 |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) .cse1)) (= .cse1 0))))) is different from false [2022-11-25 23:56:15,412 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:15,412 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 46 [2022-11-25 23:56:15,433 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:15,433 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 123 treesize of output 122 [2022-11-25 23:56:15,446 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:15,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 74 treesize of output 64 [2022-11-25 23:56:15,884 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 41 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:56:15,884 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [589841017] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:56:15,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [636400940] [2022-11-25 23:56:15,886 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:56:15,886 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:56:15,886 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:56:15,887 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:56:15,887 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:56:15,924 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:15,924 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:56:15,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:15,996 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:16,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:16,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:16,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:16,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:16,159 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:56:16,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:56:17,309 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:56:20,579 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17045#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:56:20,580 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:56:20,580 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:56:20,580 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 17, 17] total 43 [2022-11-25 23:56:20,580 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [404658427] [2022-11-25 23:56:20,580 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:56:20,580 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-11-25 23:56:20,581 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:56:20,581 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-11-25 23:56:20,582 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=3185, Unknown=1, NotChecked=114, Total=3540 [2022-11-25 23:56:20,582 INFO L87 Difference]: Start difference. First operand 358 states and 422 transitions. Second operand has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:34,010 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:56:34,010 INFO L93 Difference]: Finished difference Result 647 states and 744 transitions. [2022-11-25 23:56:34,010 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-11-25 23:56:34,011 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-25 23:56:34,011 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:56:34,012 INFO L225 Difference]: With dead ends: 647 [2022-11-25 23:56:34,014 INFO L226 Difference]: Without dead ends: 647 [2022-11-25 23:56:34,015 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 106 SyntacticMatches, 6 SemanticMatches, 105 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 3131 ImplicationChecksByTransitivity, 16.6s TimeCoverageRelationStatistics Valid=1092, Invalid=10041, Unknown=1, NotChecked=208, Total=11342 [2022-11-25 23:56:34,016 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 828 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 1787 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 828 SdHoareTripleChecker+Valid, 462 SdHoareTripleChecker+Invalid, 1919 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 1787 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 123 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:56:34,016 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [828 Valid, 462 Invalid, 1919 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 1787 Invalid, 0 Unknown, 123 Unchecked, 1.3s Time] [2022-11-25 23:56:34,017 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 647 states. [2022-11-25 23:56:34,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 647 to 377. [2022-11-25 23:56:34,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 374 states have (on average 1.1844919786096257) internal successors, (443), 376 states have internal predecessors, (443), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:34,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 443 transitions. [2022-11-25 23:56:34,027 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 443 transitions. Word has length 49 [2022-11-25 23:56:34,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:56:34,028 INFO L495 AbstractCegarLoop]: Abstraction has 377 states and 443 transitions. [2022-11-25 23:56:34,028 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:34,028 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 443 transitions. [2022-11-25 23:56:34,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-25 23:56:34,029 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:56:34,029 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:56:34,041 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-25 23:56:34,236 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:34,236 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:56:34,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:56:34,237 INFO L85 PathProgramCache]: Analyzing trace with hash -17042882, now seen corresponding path program 7 times [2022-11-25 23:56:34,237 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:56:34,237 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1150583665] [2022-11-25 23:56:34,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:56:34,237 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:56:34,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:35,127 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 5 proven. 66 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:56:35,127 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:56:35,127 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1150583665] [2022-11-25 23:56:35,127 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1150583665] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:56:35,127 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1727261896] [2022-11-25 23:56:35,127 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:56:35,127 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:35,127 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:56:35,130 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:56:35,131 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-25 23:56:35,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:35,293 INFO L263 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-25 23:56:35,296 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:56:35,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:36,401 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:56:36,405 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:36,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-25 23:56:36,409 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:56:36,409 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:56:36,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-25 23:56:36,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2022-11-25 23:56:37,448 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:56:37,448 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1727261896] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:56:37,449 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1594699026] [2022-11-25 23:56:37,450 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:56:37,450 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:56:37,450 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:56:37,450 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:56:37,450 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:56:37,470 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:37,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:56:37,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:56:37,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:37,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:37,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:37,664 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-25 23:56:37,710 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:37,742 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:37,787 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:56:37,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:56:37,983 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:56:43,408 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18520#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:56:43,408 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:56:43,408 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:56:43,408 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 17, 17] total 48 [2022-11-25 23:56:43,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [12262966] [2022-11-25 23:56:43,408 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:56:43,409 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-25 23:56:43,409 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:56:43,409 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-25 23:56:43,410 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=217, Invalid=3689, Unknown=0, NotChecked=0, Total=3906 [2022-11-25 23:56:43,410 INFO L87 Difference]: Start difference. First operand 377 states and 443 transitions. Second operand has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:56,697 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:56:56,697 INFO L93 Difference]: Finished difference Result 1450 states and 1636 transitions. [2022-11-25 23:56:56,697 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 113 states. [2022-11-25 23:56:56,697 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-25 23:56:56,698 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:56:56,702 INFO L225 Difference]: With dead ends: 1450 [2022-11-25 23:56:56,702 INFO L226 Difference]: Without dead ends: 1430 [2022-11-25 23:56:56,704 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 102 SyntacticMatches, 1 SemanticMatches, 165 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7445 ImplicationChecksByTransitivity, 15.2s TimeCoverageRelationStatistics Valid=1927, Invalid=25795, Unknown=0, NotChecked=0, Total=27722 [2022-11-25 23:56:56,705 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 1764 mSDsluCounter, 2230 mSDsCounter, 0 mSdLazyCounter, 6393 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1764 SdHoareTripleChecker+Valid, 2319 SdHoareTripleChecker+Invalid, 6411 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 6393 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:56:56,705 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1764 Valid, 2319 Invalid, 6411 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 6393 Invalid, 0 Unknown, 0 Unchecked, 5.1s Time] [2022-11-25 23:56:56,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1430 states. [2022-11-25 23:56:56,720 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1430 to 564. [2022-11-25 23:56:56,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1871657754010696) internal successors, (666), 563 states have internal predecessors, (666), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:56,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 666 transitions. [2022-11-25 23:56:56,722 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 666 transitions. Word has length 49 [2022-11-25 23:56:56,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:56:56,723 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 666 transitions. [2022-11-25 23:56:56,723 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:56:56,723 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 666 transitions. [2022-11-25 23:56:56,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-25 23:56:56,724 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:56:56,725 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:56:56,735 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-25 23:56:56,930 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:56,931 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:56:56,931 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:56:56,931 INFO L85 PathProgramCache]: Analyzing trace with hash 999448052, now seen corresponding path program 6 times [2022-11-25 23:56:56,931 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:56:56,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [549635776] [2022-11-25 23:56:56,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:56:56,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:56:56,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:56:57,871 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:56:57,872 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:56:57,872 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [549635776] [2022-11-25 23:56:57,872 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [549635776] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:56:57,872 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1970022529] [2022-11-25 23:56:57,872 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:56:57,872 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:56:57,873 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:56:57,873 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:56:57,878 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-25 23:56:58,067 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:56:58,068 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:56:58,070 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 53 conjunts are in the unsatisfiable core [2022-11-25 23:56:58,072 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:56:58,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:56:58,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:58,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 23:56:58,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-25 23:56:58,586 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:56:58,586 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:56:58,686 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1030 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1030) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)))) is different from false [2022-11-25 23:56:58,694 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:58,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 23:56:58,703 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:56:58,703 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 23:56:58,926 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:56:58,926 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1970022529] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:56:58,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1528265165] [2022-11-25 23:56:58,928 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:56:58,928 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:56:58,928 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:56:58,929 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:56:58,929 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:56:58,960 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:56:58,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:56:58,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:59,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:59,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:59,101 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:56:59,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:59,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:56:59,192 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:56:59,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:56:59,590 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:57:04,142 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21080#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:57:04,143 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:57:04,143 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:57:04,143 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 13, 13] total 29 [2022-11-25 23:57:04,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1578082188] [2022-11-25 23:57:04,143 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:57:04,143 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-25 23:57:04,144 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:57:04,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-25 23:57:04,145 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=155, Invalid=1828, Unknown=1, NotChecked=86, Total=2070 [2022-11-25 23:57:04,145 INFO L87 Difference]: Start difference. First operand 564 states and 666 transitions. Second operand has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:05,677 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:57:05,677 INFO L93 Difference]: Finished difference Result 767 states and 886 transitions. [2022-11-25 23:57:05,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-25 23:57:05,678 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-25 23:57:05,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:57:05,681 INFO L225 Difference]: With dead ends: 767 [2022-11-25 23:57:05,682 INFO L226 Difference]: Without dead ends: 676 [2022-11-25 23:57:05,682 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 179 GetRequests, 118 SyntacticMatches, 3 SemanticMatches, 58 ConstructedPredicates, 1 IntricatePredicates, 1 DeprecatedPredicates, 629 ImplicationChecksByTransitivity, 6.3s TimeCoverageRelationStatistics Valid=295, Invalid=3130, Unknown=1, NotChecked=114, Total=3540 [2022-11-25 23:57:05,683 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 265 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 681 mSolverCounterSat, 6 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 265 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 745 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 681 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 56 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-25 23:57:05,683 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [265 Valid, 282 Invalid, 745 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 681 Invalid, 2 Unknown, 56 Unchecked, 0.6s Time] [2022-11-25 23:57:05,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 676 states. [2022-11-25 23:57:05,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 676 to 669. [2022-11-25 23:57:05,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 669 states, 666 states have (on average 1.1681681681681682) internal successors, (778), 668 states have internal predecessors, (778), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:05,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 669 states to 669 states and 778 transitions. [2022-11-25 23:57:05,697 INFO L78 Accepts]: Start accepts. Automaton has 669 states and 778 transitions. Word has length 50 [2022-11-25 23:57:05,698 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:57:05,698 INFO L495 AbstractCegarLoop]: Abstraction has 669 states and 778 transitions. [2022-11-25 23:57:05,698 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:05,698 INFO L276 IsEmpty]: Start isEmpty. Operand 669 states and 778 transitions. [2022-11-25 23:57:05,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-25 23:57:05,700 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:57:05,700 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-25 23:57:05,707 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-25 23:57:05,907 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-11-25 23:57:05,907 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:57:05,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:57:05,907 INFO L85 PathProgramCache]: Analyzing trace with hash 49454004, now seen corresponding path program 6 times [2022-11-25 23:57:05,908 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:57:05,908 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [745032807] [2022-11-25 23:57:05,908 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:57:05,908 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:57:05,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:07,107 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:57:07,107 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:57:07,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [745032807] [2022-11-25 23:57:07,107 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [745032807] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:57:07,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1764889614] [2022-11-25 23:57:07,107 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:57:07,107 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:07,108 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:57:07,111 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:57:07,134 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-25 23:57:07,322 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:57:07,322 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:57:07,326 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-25 23:57:07,328 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:57:07,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:57:07,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:07,758 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-25 23:57:08,157 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-11-25 23:57:08,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-11-25 23:57:08,162 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:57:08,162 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:57:08,380 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:57:08,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-25 23:57:08,387 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:57:08,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-25 23:57:08,638 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:57:08,638 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1764889614] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:57:08,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1414600491] [2022-11-25 23:57:08,639 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:57:08,639 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:57:08,640 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:57:08,640 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:57:08,640 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:57:08,671 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:08,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:57:08,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:57:08,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:08,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:08,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:57:08,868 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-25 23:57:08,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-25 23:57:08,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:08,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:08,977 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:57:08,977 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:57:10,115 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:57:13,739 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22897#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:57:13,739 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:57:13,739 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:57:13,739 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 17, 17] total 36 [2022-11-25 23:57:13,740 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1410757243] [2022-11-25 23:57:13,740 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:57:13,742 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-11-25 23:57:13,742 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:57:13,746 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-11-25 23:57:13,747 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=191, Invalid=2555, Unknown=10, NotChecked=0, Total=2756 [2022-11-25 23:57:13,747 INFO L87 Difference]: Start difference. First operand 669 states and 778 transitions. Second operand has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:15,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:57:15,886 INFO L93 Difference]: Finished difference Result 645 states and 746 transitions. [2022-11-25 23:57:15,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-25 23:57:15,886 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-25 23:57:15,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:57:15,888 INFO L225 Difference]: With dead ends: 645 [2022-11-25 23:57:15,889 INFO L226 Difference]: Without dead ends: 468 [2022-11-25 23:57:15,889 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 192 GetRequests, 117 SyntacticMatches, 4 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 1104 ImplicationChecksByTransitivity, 6.3s TimeCoverageRelationStatistics Valid=470, Invalid=4776, Unknown=10, NotChecked=0, Total=5256 [2022-11-25 23:57:15,890 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 276 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 1083 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 276 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 1091 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 1083 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-25 23:57:15,890 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [276 Valid, 316 Invalid, 1091 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 1083 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-25 23:57:15,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 468 states. [2022-11-25 23:57:15,897 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 468 to 468. [2022-11-25 23:57:15,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 468 states, 465 states have (on average 1.1913978494623656) internal successors, (554), 467 states have internal predecessors, (554), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:15,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 554 transitions. [2022-11-25 23:57:15,900 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 554 transitions. Word has length 51 [2022-11-25 23:57:15,900 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:57:15,900 INFO L495 AbstractCegarLoop]: Abstraction has 468 states and 554 transitions. [2022-11-25 23:57:15,900 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:15,900 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 554 transitions. [2022-11-25 23:57:15,901 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-25 23:57:15,902 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:57:15,902 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:57:15,918 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-25 23:57:16,118 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-11-25 23:57:16,118 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:57:16,119 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:57:16,119 INFO L85 PathProgramCache]: Analyzing trace with hash 523030176, now seen corresponding path program 7 times [2022-11-25 23:57:16,119 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:57:16,119 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [418490888] [2022-11-25 23:57:16,119 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:57:16,119 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:57:16,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:16,599 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 4 proven. 60 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:57:16,600 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:57:16,600 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [418490888] [2022-11-25 23:57:16,600 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [418490888] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:57:16,600 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1887291836] [2022-11-25 23:57:16,600 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:57:16,600 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:16,600 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:57:16,603 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:57:16,606 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-25 23:57:16,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:16,791 INFO L263 TraceCheckSpWp]: Trace formula consists of 362 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-25 23:57:16,792 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:57:17,116 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 55 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:57:17,116 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:57:17,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:57:17,594 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 55 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 23:57:17,594 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1887291836] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:57:17,594 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [268446916] [2022-11-25 23:57:17,595 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:57:17,596 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:57:17,596 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:57:17,596 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:57:17,596 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:57:17,619 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:17,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:57:17,657 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:57:17,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:17,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:17,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:57:17,822 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-25 23:57:17,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-25 23:57:17,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:17,894 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:17,930 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:57:17,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:57:19,075 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:57:22,091 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24396#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:57:22,091 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:57:22,091 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:57:22,091 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 28 [2022-11-25 23:57:22,091 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1137331501] [2022-11-25 23:57:22,092 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:57:22,092 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-25 23:57:22,092 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:57:22,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-25 23:57:22,093 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=206, Invalid=1864, Unknown=0, NotChecked=0, Total=2070 [2022-11-25 23:57:22,093 INFO L87 Difference]: Start difference. First operand 468 states and 554 transitions. Second operand has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:23,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:57:23,415 INFO L93 Difference]: Finished difference Result 548 states and 628 transitions. [2022-11-25 23:57:23,416 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-25 23:57:23,416 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-25 23:57:23,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:57:23,417 INFO L225 Difference]: With dead ends: 548 [2022-11-25 23:57:23,418 INFO L226 Difference]: Without dead ends: 548 [2022-11-25 23:57:23,418 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 114 SyntacticMatches, 5 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1198 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=687, Invalid=3735, Unknown=0, NotChecked=0, Total=4422 [2022-11-25 23:57:23,419 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 686 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 690 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 686 SdHoareTripleChecker+Valid, 118 SdHoareTripleChecker+Invalid, 694 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 690 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 23:57:23,419 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [686 Valid, 118 Invalid, 694 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 690 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-25 23:57:23,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 548 states. [2022-11-25 23:57:23,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 548 to 468. [2022-11-25 23:57:23,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 468 states, 465 states have (on average 1.1870967741935483) internal successors, (552), 467 states have internal predecessors, (552), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:23,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 552 transitions. [2022-11-25 23:57:23,429 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 552 transitions. Word has length 51 [2022-11-25 23:57:23,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:57:23,429 INFO L495 AbstractCegarLoop]: Abstraction has 468 states and 552 transitions. [2022-11-25 23:57:23,429 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:23,430 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 552 transitions. [2022-11-25 23:57:23,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-25 23:57:23,431 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:57:23,431 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:57:23,443 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-25 23:57:23,638 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable44,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:23,638 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:57:23,639 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:57:23,639 INFO L85 PathProgramCache]: Analyzing trace with hash -620978066, now seen corresponding path program 7 times [2022-11-25 23:57:23,639 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:57:23,639 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2121803864] [2022-11-25 23:57:23,639 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:57:23,639 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:57:23,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:24,090 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 4 proven. 70 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:57:24,090 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:57:24,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2121803864] [2022-11-25 23:57:24,090 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2121803864] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:57:24,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [377657012] [2022-11-25 23:57:24,090 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:57:24,090 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:24,091 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:57:24,092 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:57:24,095 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-25 23:57:24,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:24,265 INFO L263 TraceCheckSpWp]: Trace formula consists of 348 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-25 23:57:24,267 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:57:24,609 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 65 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:57:24,609 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:57:24,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:57:25,094 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 65 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 23:57:25,094 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [377657012] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:57:25,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [629716425] [2022-11-25 23:57:25,096 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:57:25,096 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:57:25,096 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:57:25,096 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:57:25,096 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:57:25,117 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:25,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:57:25,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:57:25,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:25,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:25,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:57:25,320 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-25 23:57:25,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-25 23:57:25,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:25,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:25,425 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:57:25,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:57:25,854 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:57:30,044 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25804#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:57:30,044 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:57:30,044 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:57:30,044 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 26 [2022-11-25 23:57:30,044 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [281614013] [2022-11-25 23:57:30,044 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:57:30,045 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-25 23:57:30,045 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:57:30,045 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-25 23:57:30,045 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1684, Unknown=0, NotChecked=0, Total=1892 [2022-11-25 23:57:30,046 INFO L87 Difference]: Start difference. First operand 468 states and 552 transitions. Second operand has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:30,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:57:30,691 INFO L93 Difference]: Finished difference Result 665 states and 783 transitions. [2022-11-25 23:57:30,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-25 23:57:30,692 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-25 23:57:30,692 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:57:30,694 INFO L225 Difference]: With dead ends: 665 [2022-11-25 23:57:30,694 INFO L226 Difference]: Without dead ends: 665 [2022-11-25 23:57:30,695 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 118 SyntacticMatches, 5 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 793 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=359, Invalid=2293, Unknown=0, NotChecked=0, Total=2652 [2022-11-25 23:57:30,695 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 424 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 599 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 424 SdHoareTripleChecker+Valid, 134 SdHoareTripleChecker+Invalid, 600 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 599 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:57:30,695 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [424 Valid, 134 Invalid, 600 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 599 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 23:57:30,696 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 665 states. [2022-11-25 23:57:30,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 665 to 564. [2022-11-25 23:57:30,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1942959001782532) internal successors, (670), 563 states have internal predecessors, (670), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:30,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 670 transitions. [2022-11-25 23:57:30,707 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 670 transitions. Word has length 52 [2022-11-25 23:57:30,707 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:57:30,707 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 670 transitions. [2022-11-25 23:57:30,707 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:57:30,708 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 670 transitions. [2022-11-25 23:57:30,709 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-25 23:57:30,709 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:57:30,709 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-25 23:57:30,722 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-25 23:57:30,916 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-11-25 23:57:30,916 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:57:30,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:57:30,917 INFO L85 PathProgramCache]: Analyzing trace with hash 1355851898, now seen corresponding path program 8 times [2022-11-25 23:57:30,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:57:30,917 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1790288349] [2022-11-25 23:57:30,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:57:30,917 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:57:30,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:57:31,389 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 4 proven. 66 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-25 23:57:31,389 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:57:31,389 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1790288349] [2022-11-25 23:57:31,389 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1790288349] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:57:31,389 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1333044740] [2022-11-25 23:57:31,389 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:57:31,390 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:57:31,390 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:57:31,393 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:57:31,419 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-25 23:57:31,659 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 23:57:31,659 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:57:31,663 INFO L263 TraceCheckSpWp]: Trace formula consists of 328 conjuncts, 96 conjunts are in the unsatisfiable core [2022-11-25 23:57:31,667 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:57:31,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-25 23:57:31,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:57:31,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-25 23:57:33,543 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:33,544 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:33,547 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:57:33,618 INFO L321 Elim1Store]: treesize reduction 34, result has 62.6 percent of original size [2022-11-25 23:57:33,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 4 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 14 case distinctions, treesize of input 78 treesize of output 88 [2022-11-25 23:57:33,863 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 0 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-25 23:57:33,863 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:57:36,165 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (v_ArrVal_1216 (Array Int Int)) (|v_ULTIMATE.start_substring_~pt~0#1.base_263| Int) (|v_ULTIMATE.start_substring_~ps2~0#1.offset_259| Int)) (let ((.cse3 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1216))) (let ((.cse1 (select .cse3 |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (.cse0 (select (select .cse3 |ULTIMATE.start_substring_~pt~0#1.base|) |c_ULTIMATE.start_main_~nondetString2~0#1.offset|)) (.cse2 (select (select .cse3 |v_ULTIMATE.start_substring_~pt~0#1.base_263|) (+ |c_ULTIMATE.start_main_~nondetString2~0#1.offset| 1)))) (or (not (= .cse0 (select .cse1 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)))) (<= (+ 2 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|) (select |c_#length| |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (= (select .cse1 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0) (not (= .cse2 (select .cse1 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|))) (not (<= |v_ULTIMATE.start_substring_~ps2~0#1.offset_259| (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|))) (not (<= 0 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|)) (= .cse0 0) (= .cse2 0))))) is different from false [2022-11-25 23:57:36,191 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:57:36,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 152 treesize of output 86 [2022-11-25 23:57:36,321 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:57:36,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 1 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 14 case distinctions, treesize of input 239 treesize of output 328 [2022-11-25 23:57:36,402 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-25 23:57:36,402 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 2 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 8 case distinctions, treesize of input 148 treesize of output 190 [2022-11-25 23:57:36,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 23:58:02,125 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 0 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-25 23:58:02,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1333044740] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:58:02,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [502149133] [2022-11-25 23:58:02,127 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:58:02,127 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:58:02,127 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:58:02,127 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:58:02,128 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:58:02,157 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:58:02,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:58:02,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:58:02,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:02,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:02,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:58:02,351 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-25 23:58:02,351 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-25 23:58:02,396 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:02,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:02,461 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:58:02,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:58:03,734 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:58:08,252 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27429#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:58:08,252 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:58:08,252 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:58:08,252 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 19, 19] total 50 [2022-11-25 23:58:08,252 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [802205559] [2022-11-25 23:58:08,252 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:58:08,252 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-11-25 23:58:08,253 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:58:08,253 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-11-25 23:58:08,253 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=310, Invalid=4115, Unknown=1, NotChecked=130, Total=4556 [2022-11-25 23:58:08,253 INFO L87 Difference]: Start difference. First operand 564 states and 670 transitions. Second operand has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:40,568 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:58:40,568 INFO L93 Difference]: Finished difference Result 699 states and 788 transitions. [2022-11-25 23:58:40,569 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 82 states. [2022-11-25 23:58:40,569 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-25 23:58:40,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:58:40,570 INFO L225 Difference]: With dead ends: 699 [2022-11-25 23:58:40,570 INFO L226 Difference]: Without dead ends: 699 [2022-11-25 23:58:40,572 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 250 GetRequests, 103 SyntacticMatches, 1 SemanticMatches, 146 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 6001 ImplicationChecksByTransitivity, 36.1s TimeCoverageRelationStatistics Valid=3326, Invalid=18139, Unknown=1, NotChecked=290, Total=21756 [2022-11-25 23:58:40,572 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 1771 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 1544 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1771 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 1722 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 1544 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 112 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-11-25 23:58:40,572 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1771 Valid, 62 Invalid, 1722 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 1544 Invalid, 0 Unknown, 112 Unchecked, 3.8s Time] [2022-11-25 23:58:40,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 699 states. [2022-11-25 23:58:40,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 699 to 564. [2022-11-25 23:58:40,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1800356506238858) internal successors, (662), 563 states have internal predecessors, (662), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:40,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 662 transitions. [2022-11-25 23:58:40,583 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 662 transitions. Word has length 53 [2022-11-25 23:58:40,583 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:58:40,583 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 662 transitions. [2022-11-25 23:58:40,584 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:40,584 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 662 transitions. [2022-11-25 23:58:40,585 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-25 23:58:40,585 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:58:40,585 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:58:40,603 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-25 23:58:40,792 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-11-25 23:58:40,792 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:58:40,792 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:58:40,792 INFO L85 PathProgramCache]: Analyzing trace with hash -563151082, now seen corresponding path program 8 times [2022-11-25 23:58:40,792 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:58:40,792 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1700245411] [2022-11-25 23:58:40,793 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:58:40,793 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:58:40,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:58:41,397 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:58:41,397 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:58:41,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1700245411] [2022-11-25 23:58:41,397 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1700245411] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:58:41,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2123583726] [2022-11-25 23:58:41,397 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:58:41,398 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:58:41,398 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:58:41,399 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:58:41,401 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-25 23:58:41,730 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-25 23:58:41,730 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:58:41,733 INFO L263 TraceCheckSpWp]: Trace formula consists of 386 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-25 23:58:41,735 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:58:42,095 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:58:42,095 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:58:42,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-25 23:58:42,589 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:58:42,589 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2123583726] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:58:42,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2071890590] [2022-11-25 23:58:42,591 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:58:42,591 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:58:42,591 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:58:42,592 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:58:42,592 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:58:42,628 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:58:42,631 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:58:42,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:42,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:42,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:42,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:42,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:42,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:42,873 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:58:42,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:58:43,160 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:58:46,155 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29219#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:58:46,155 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:58:46,155 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:58:46,155 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 37 [2022-11-25 23:58:46,155 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1703252774] [2022-11-25 23:58:46,156 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:58:46,156 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-11-25 23:58:46,156 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:58:46,157 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-11-25 23:58:46,157 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=303, Invalid=2349, Unknown=0, NotChecked=0, Total=2652 [2022-11-25 23:58:46,157 INFO L87 Difference]: Start difference. First operand 564 states and 662 transitions. Second operand has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:47,695 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:58:47,696 INFO L93 Difference]: Finished difference Result 738 states and 843 transitions. [2022-11-25 23:58:47,696 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-25 23:58:47,696 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-25 23:58:47,696 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:58:47,698 INFO L225 Difference]: With dead ends: 738 [2022-11-25 23:58:47,699 INFO L226 Difference]: Without dead ends: 738 [2022-11-25 23:58:47,699 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 115 SyntacticMatches, 6 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1411 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=606, Invalid=3554, Unknown=0, NotChecked=0, Total=4160 [2022-11-25 23:58:47,700 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 378 mSDsluCounter, 402 mSDsCounter, 0 mSdLazyCounter, 1540 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 378 SdHoareTripleChecker+Valid, 450 SdHoareTripleChecker+Invalid, 1541 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1540 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:58:47,700 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [378 Valid, 450 Invalid, 1541 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1540 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-25 23:58:47,701 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 738 states. [2022-11-25 23:58:47,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 738 to 586. [2022-11-25 23:58:47,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 586 states, 583 states have (on average 1.1886792452830188) internal successors, (693), 585 states have internal predecessors, (693), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:47,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 586 states to 586 states and 693 transitions. [2022-11-25 23:58:47,712 INFO L78 Accepts]: Start accepts. Automaton has 586 states and 693 transitions. Word has length 53 [2022-11-25 23:58:47,712 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:58:47,712 INFO L495 AbstractCegarLoop]: Abstraction has 586 states and 693 transitions. [2022-11-25 23:58:47,713 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:47,713 INFO L276 IsEmpty]: Start isEmpty. Operand 586 states and 693 transitions. [2022-11-25 23:58:47,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-25 23:58:47,714 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:58:47,714 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:58:47,722 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-25 23:58:47,921 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-11-25 23:58:47,922 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:58:47,922 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:58:47,922 INFO L85 PathProgramCache]: Analyzing trace with hash 1154445308, now seen corresponding path program 9 times [2022-11-25 23:58:47,922 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:58:47,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1704200480] [2022-11-25 23:58:47,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:58:47,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:58:47,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:58:48,321 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 4 proven. 76 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:58:48,322 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:58:48,322 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1704200480] [2022-11-25 23:58:48,322 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1704200480] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:58:48,322 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1035644110] [2022-11-25 23:58:48,322 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:58:48,322 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:58:48,322 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:58:48,323 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:58:48,326 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-25 23:58:48,534 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:58:48,534 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:58:48,537 INFO L263 TraceCheckSpWp]: Trace formula consists of 372 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-25 23:58:48,539 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:58:48,878 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:58:48,878 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:58:49,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:58:49,420 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-25 23:58:49,420 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1035644110] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:58:49,420 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1889497401] [2022-11-25 23:58:49,422 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-25 23:58:49,422 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:58:49,422 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:58:49,423 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:58:49,423 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:58:49,446 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:58:49,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:58:49,482 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:49,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:49,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:49,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:49,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:49,630 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:58:49,667 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:58:49,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:58:50,837 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:58:54,189 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '30937#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:58:54,189 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:58:54,189 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:58:54,189 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 28 [2022-11-25 23:58:54,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [369579847] [2022-11-25 23:58:54,189 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:58:54,190 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-25 23:58:54,190 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:58:54,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-25 23:58:54,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1862, Unknown=0, NotChecked=0, Total=2070 [2022-11-25 23:58:54,190 INFO L87 Difference]: Start difference. First operand 586 states and 693 transitions. Second operand has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:55,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:58:55,252 INFO L93 Difference]: Finished difference Result 672 states and 767 transitions. [2022-11-25 23:58:55,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-25 23:58:55,252 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-11-25 23:58:55,252 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:58:55,254 INFO L225 Difference]: With dead ends: 672 [2022-11-25 23:58:55,254 INFO L226 Difference]: Without dead ends: 672 [2022-11-25 23:58:55,255 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 126 SyntacticMatches, 5 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1132 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=615, Invalid=3545, Unknown=0, NotChecked=0, Total=4160 [2022-11-25 23:58:55,255 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 937 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 636 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 937 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 645 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 636 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 23:58:55,255 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [937 Valid, 105 Invalid, 645 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 636 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 23:58:55,256 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 672 states. [2022-11-25 23:58:55,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 672 to 586. [2022-11-25 23:58:55,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 586 states, 583 states have (on average 1.1818181818181819) internal successors, (689), 585 states have internal predecessors, (689), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:55,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 586 states to 586 states and 689 transitions. [2022-11-25 23:58:55,265 INFO L78 Accepts]: Start accepts. Automaton has 586 states and 689 transitions. Word has length 55 [2022-11-25 23:58:55,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:58:55,266 INFO L495 AbstractCegarLoop]: Abstraction has 586 states and 689 transitions. [2022-11-25 23:58:55,266 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:58:55,266 INFO L276 IsEmpty]: Start isEmpty. Operand 586 states and 689 transitions. [2022-11-25 23:58:55,267 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-25 23:58:55,267 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:58:55,267 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:58:55,274 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-25 23:58:55,473 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-25 23:58:55,474 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-25 23:58:55,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:58:55,474 INFO L85 PathProgramCache]: Analyzing trace with hash -690235405, now seen corresponding path program 5 times [2022-11-25 23:58:55,474 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:58:55,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [748089248] [2022-11-25 23:58:55,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:58:55,474 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:58:55,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:58:56,061 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 9 proven. 86 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:58:56,061 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:58:56,061 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [748089248] [2022-11-25 23:58:56,061 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [748089248] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:58:56,061 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1066695552] [2022-11-25 23:58:56,062 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:58:56,062 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:58:56,062 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:58:56,063 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:58:56,065 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-25 23:58:56,415 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-25 23:58:56,415 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:58:56,419 INFO L263 TraceCheckSpWp]: Trace formula consists of 400 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-25 23:58:56,422 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:58:56,442 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-25 23:58:56,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-25 23:58:57,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:59:07,591 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-25 23:59:07,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 35 treesize of output 17 [2022-11-25 23:59:07,638 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 65 proven. 30 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:59:07,639 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:59:08,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-25 23:59:08,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-25 23:59:09,435 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 60 proven. 35 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-25 23:59:09,435 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1066695552] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:59:09,435 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2067471204] [2022-11-25 23:59:09,437 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-25 23:59:09,437 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:59:09,437 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:59:09,438 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:59:09,438 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:59:09,473 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-25 23:59:09,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-25 23:59:09,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:59:09,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:09,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:09,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:09,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-25 23:59:09,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:09,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:59:09,818 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-25 23:59:09,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-25 23:59:10,004 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:59:14,232 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '32628#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-25 23:59:14,232 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:59:14,232 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:59:14,233 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 18, 18] total 48 [2022-11-25 23:59:14,233 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1452453698] [2022-11-25 23:59:14,233 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:59:14,233 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-25 23:59:14,233 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:59:14,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-25 23:59:14,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=310, Invalid=3593, Unknown=3, NotChecked=0, Total=3906 [2022-11-25 23:59:14,235 INFO L87 Difference]: Start difference. First operand 586 states and 689 transitions. Second operand has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:00:46,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:00:46,520 INFO L93 Difference]: Finished difference Result 1854 states and 2065 transitions. [2022-11-26 00:00:46,520 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 131 states. [2022-11-26 00:00:46,520 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-11-26 00:00:46,521 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:00:46,525 INFO L225 Difference]: With dead ends: 1854 [2022-11-26 00:00:46,525 INFO L226 Difference]: Without dead ends: 1836 [2022-11-26 00:00:46,527 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 309 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 190 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10830 ImplicationChecksByTransitivity, 103.0s TimeCoverageRelationStatistics Valid=6070, Invalid=30593, Unknown=9, NotChecked=0, Total=36672 [2022-11-26 00:00:46,527 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 1352 mSDsluCounter, 653 mSDsCounter, 0 mSdLazyCounter, 3223 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1352 SdHoareTripleChecker+Valid, 681 SdHoareTripleChecker+Invalid, 3225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 3223 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.6s IncrementalHoareTripleChecker+Time [2022-11-26 00:00:46,528 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1352 Valid, 681 Invalid, 3225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 3223 Invalid, 0 Unknown, 0 Unchecked, 4.6s Time] [2022-11-26 00:00:46,530 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1836 states. [2022-11-26 00:00:46,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1836 to 741. [2022-11-26 00:00:46,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 741 states, 738 states have (on average 1.1856368563685638) internal successors, (875), 740 states have internal predecessors, (875), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:00:46,549 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 741 states to 741 states and 875 transitions. [2022-11-26 00:00:46,550 INFO L78 Accepts]: Start accepts. Automaton has 741 states and 875 transitions. Word has length 56 [2022-11-26 00:00:46,550 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:00:46,550 INFO L495 AbstractCegarLoop]: Abstraction has 741 states and 875 transitions. [2022-11-26 00:00:46,550 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:00:46,551 INFO L276 IsEmpty]: Start isEmpty. Operand 741 states and 875 transitions. [2022-11-26 00:00:46,552 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-26 00:00:46,552 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:00:46,552 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:00:46,562 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Ended with exit code 0 [2022-11-26 00:00:46,759 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-26 00:00:46,760 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-26 00:00:46,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:00:46,760 INFO L85 PathProgramCache]: Analyzing trace with hash 316753893, now seen corresponding path program 10 times [2022-11-26 00:00:46,760 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:00:46,760 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1361725374] [2022-11-26 00:00:46,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:00:46,760 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:00:46,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:00:48,293 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 93 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:00:48,293 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:00:48,293 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1361725374] [2022-11-26 00:00:48,293 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1361725374] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:00:48,293 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [179625322] [2022-11-26 00:00:48,293 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:00:48,293 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:00:48,294 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:00:48,294 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:00:48,297 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-26 00:00:48,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:00:48,511 INFO L263 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-26 00:00:48,514 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:00:48,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:48,939 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-26 00:00:48,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-26 00:00:49,398 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-11-26 00:00:49,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-11-26 00:00:49,406 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 68 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-26 00:00:49,406 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:00:49,742 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-26 00:00:50,004 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 68 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-26 00:00:50,004 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [179625322] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:00:50,004 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1497163783] [2022-11-26 00:00:50,005 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-26 00:00:50,006 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:00:50,006 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:00:50,006 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:00:50,006 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:00:50,028 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:00:50,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:00:50,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:00:50,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:50,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:50,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:50,226 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-26 00:00:50,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:50,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:00:50,369 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-26 00:00:50,370 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-26 00:00:50,950 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:00:55,412 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '35882#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-26 00:00:55,412 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:00:55,413 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:00:55,413 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 19, 19] total 44 [2022-11-26 00:00:55,413 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1321288210] [2022-11-26 00:00:55,413 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:00:55,413 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-11-26 00:00:55,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:00:55,414 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-11-26 00:00:55,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=236, Invalid=3424, Unknown=0, NotChecked=0, Total=3660 [2022-11-26 00:00:55,415 INFO L87 Difference]: Start difference. First operand 741 states and 875 transitions. Second operand has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:10,849 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:01:10,849 INFO L93 Difference]: Finished difference Result 1417 states and 1644 transitions. [2022-11-26 00:01:10,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 71 states. [2022-11-26 00:01:10,850 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-11-26 00:01:10,851 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:01:10,858 INFO L225 Difference]: With dead ends: 1417 [2022-11-26 00:01:10,858 INFO L226 Difference]: Without dead ends: 1417 [2022-11-26 00:01:10,859 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 137 SyntacticMatches, 4 SemanticMatches, 122 ConstructedPredicates, 0 IntricatePredicates, 2 DeprecatedPredicates, 3971 ImplicationChecksByTransitivity, 14.8s TimeCoverageRelationStatistics Valid=1402, Invalid=13850, Unknown=0, NotChecked=0, Total=15252 [2022-11-26 00:01:10,859 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 1456 mSDsluCounter, 887 mSDsCounter, 0 mSdLazyCounter, 3844 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1456 SdHoareTripleChecker+Valid, 936 SdHoareTripleChecker+Invalid, 3863 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 3844 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.7s IncrementalHoareTripleChecker+Time [2022-11-26 00:01:10,859 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1456 Valid, 936 Invalid, 3863 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 3844 Invalid, 0 Unknown, 0 Unchecked, 6.7s Time] [2022-11-26 00:01:10,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1417 states. [2022-11-26 00:01:10,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1417 to 817. [2022-11-26 00:01:10,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 817 states, 814 states have (on average 1.1805896805896805) internal successors, (961), 816 states have internal predecessors, (961), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:10,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 817 states to 817 states and 961 transitions. [2022-11-26 00:01:10,877 INFO L78 Accepts]: Start accepts. Automaton has 817 states and 961 transitions. Word has length 58 [2022-11-26 00:01:10,877 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:01:10,877 INFO L495 AbstractCegarLoop]: Abstraction has 817 states and 961 transitions. [2022-11-26 00:01:10,877 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:01:10,877 INFO L276 IsEmpty]: Start isEmpty. Operand 817 states and 961 transitions. [2022-11-26 00:01:10,879 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-26 00:01:10,879 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:01:10,879 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:01:10,899 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-26 00:01:11,090 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:01:11,090 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-26 00:01:11,091 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:01:11,091 INFO L85 PathProgramCache]: Analyzing trace with hash -175738785, now seen corresponding path program 11 times [2022-11-26 00:01:11,091 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:01:11,091 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [637536744] [2022-11-26 00:01:11,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:01:11,091 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:01:11,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:01:11,564 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 9 proven. 88 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-26 00:01:11,564 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:01:11,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [637536744] [2022-11-26 00:01:11,564 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [637536744] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:01:11,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1895757280] [2022-11-26 00:01:11,564 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:01:11,564 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:01:11,564 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:01:11,565 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:01:11,567 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c23164c6-e5d0-43d0-aac3-d04e3c1a3ebf/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-26 00:01:11,890 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-26 00:01:11,890 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:01:11,894 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 81 conjunts are in the unsatisfiable core [2022-11-26 00:01:11,901 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:01:11,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:01:12,052 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:01:12,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 00:02:18,129 INFO L321 Elim1Store]: treesize reduction 41, result has 83.8 percent of original size [2022-11-26 00:02:18,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 86 treesize of output 246 [2022-11-26 00:02:38,383 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 7 proven. 71 refuted. 7 times theorem prover too weak. 37 trivial. 0 not checked. [2022-11-26 00:02:38,383 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:02:50,156 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:02:50,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 184 treesize of output 96 [2022-11-26 00:02:50,423 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:02:50,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 285 treesize of output 455 [2022-11-26 00:02:50,706 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:02:50,706 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 190 treesize of output 280 [2022-11-26 00:02:50,764 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12